[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 15.322565] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 19.449852] random: sshd: uninitialized urandom read (32 bytes read) [ 19.750950] random: sshd: uninitialized urandom read (32 bytes read) [ 20.815080] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.5' (ECDSA) to the list of known hosts. [ 26.254845] random: sshd: uninitialized urandom read (32 bytes read) 2018/07/11 00:52:23 fuzzer started [ 27.949388] random: cc1: uninitialized urandom read (8 bytes read) 2018/07/11 00:52:26 dialing manager at 10.128.0.26:34075 2018/07/11 00:52:27 syscalls: 1164 2018/07/11 00:52:27 code coverage: enabled 2018/07/11 00:52:27 comparison tracing: ioctl(KCOV_TRACE_CMP) failed: errno 524 2018/07/11 00:52:27 setuid sandbox: enabled 2018/07/11 00:52:27 namespace sandbox: enabled 2018/07/11 00:52:27 fault injection: CONFIG_FAULT_INJECTION is not enabled 2018/07/11 00:52:27 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/07/11 00:52:27 net packed injection: enabled [ 31.487853] random: crng init done 00:52:49 executing program 0: keyctl$set_reqkey_keyring(0xe, 0x7) r0 = dup(0xffffffffffffffff) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x4) fcntl$addseals(r0, 0x409, 0x1) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f0000000040)={0xfffffffffffffffa, 0x6, 0x0, 0x100, 0xc01, 0x20}) kexec_load(0x1, 0x2, &(0x7f0000000100)=[{&(0x7f0000000080), 0x0, 0x7, 0xa00}, {&(0x7f00000000c0)="b7e77971dfeb577cdc4702f3de1bd248a80181eda4f48f22ea382dfbd2f5e3e4c35e07710dc4cfc17c915e11c8dde8c2", 0x30, 0x3, 0x7fffffff}], 0x0) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000140)=""/106) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@multicast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4}, 0x0, @in6=@loopback}}, &(0x7f00000003c0)=0xe8) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000400)=r2) write(r1, &(0x7f0000000440)="a0dc0ec45ef5371e7ef3933e3849d7e763c50dd2959b5d664f0746083f4ce0cd4233429be3bd68b6d4c9f280c237d3398eb4c76d", 0x34) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000480)=""/116) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000500)={0x3, 'vcan0\x00', 0x3}, 0x18) r5 = add_key$keyring(&(0x7f0000000540)='keyring\x00', &(0x7f0000000580)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0x0) fstat(r4, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r5, r3, r6) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000640)={0xf128, {{0xa, 0x4e23, 0x7, @local={0xfe, 0x80, [], 0xaa}, 0xffffffff}}, 0x1, 0x4, [{{0xa, 0x4e21, 0x7, @local={0xfe, 0x80, [], 0xaa}, 0xffffffffffffee25}}, {{0xa, 0x4e24, 0x7, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}}}, {{0xa, 0x4e20, 0x6, @ipv4={[], [0xff, 0xff], @rand_addr}, 0xfffffffffffffff9}}, {{0xa, 0x4e24, 0x3ff, @dev={0xfe, 0x80, [], 0xf}, 0x180000000}}]}, 0x28c) getxattr(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)=@random={'trusted.', 'vcan0\x00'}, &(0x7f0000000980)=""/4096, 0x1000) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000001980)={0x3, {{0xa, 0x4e22, 0x4, @empty, 0x7}}, {{0xa, 0x4e20, 0x200, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}, 0x8000}}}, 0x104) sendto$inet(r4, &(0x7f0000001ac0)="75062093cd2513c1d14c62dac0f6709d60045017eb3ca534311fa796bd6a0c421a94187427bfbf47e8cf8ffae35d73b5edc877a4275562858000671797ab913d6017232be5a85374d5d48c25f6722f98037c9102d99953cb4a389505b486164fde3434dfc2ccd28a77ba5275f228d1c34c7ad34a95e12179a286a022e0dacd90c053fa13e50afa6b72584ccce174f607d0a1c12885fc595d23167107247fa37195425c6c3232f8d108502dc10cc6fa4545e52f3bc30cca84", 0xb8, 0x0, 0x0, 0x0) keyctl$restrict_keyring(0x1d, r5, 0x0, &(0x7f0000001b80)='trusted.') getsockname$inet(r4, &(0x7f0000001bc0), &(0x7f0000001c00)=0x10) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000001c40)={{0x2c, @rand_addr=0x3ff, 0x4e23, 0x3, 'fo\x00', 0x2, 0x3, 0x34}, {@loopback=0x7f000001, 0x4e21, 0x3, 0x1, 0xff, 0x7}}, 0x44) getsockopt$packet_buf(r1, 0x107, 0x2, &(0x7f0000001cc0)=""/154, &(0x7f0000001d80)=0x9a) fcntl$setlease(r4, 0x400, 0x2) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001dc0)='/proc/self/net/pfkey\x00', 0x10000, 0x0) clone(0x4000, &(0x7f0000001e00)="655f5701a954f1f09ec99c74471638e24e039c0bd243ebddd5b063cd4801cd67c31645b40034b4cd7880cbfad4a641b61f3bb655bd7bf8e86b4ef87221816c03189374b59b60a44bccf426d2e35857f875932f83a8cd10fa", &(0x7f0000001e80), &(0x7f0000001ec0), &(0x7f0000001f00)="70c6de9b4f2c4096635d7bf3d159af99f620b3653269fe56f89284d1de13d36f97fbadde927b5b6f5f8c421d2a419d0307c12b47c70c0e9b4ef6906d6001c4679edfd4b9464e8d2037dfd68a655e24901e5e40c4ed0c6d27862627b4460f81059cb334d33e4822f8f0a02f4b9b39db1fc88992c4bba8fa2a03b8dcdde398894ecc862871630db577148da889221865b87ec033554915d37e74efcf4f0616578444406ebcabdf35acdb9bcc98c4251ac646e7ff9835e8edb718cc08cae7be16b28a6ec1aaf0f9d9bfa0fd10225bd61a7be595ecf0978ad1cf585f4818a9dc8c38c7b3c964a0241392f0a31d342020") 00:52:49 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) r1 = fcntl$getown(r0, 0x9) ptrace$poke(0x4, r1, &(0x7f0000000040), 0x8) ioctl$int_out(r0, 0x5462, &(0x7f0000000080)) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r2, 0x891a, &(0x7f0000000100)={'bridge0\x00', {0x2, 0x4e23, @broadcast=0xffffffff}}) r3 = accept4(r2, 0x0, &(0x7f0000000140), 0x80800) getsockopt$inet6_tcp_buf(r2, 0x6, 0x1c, &(0x7f0000000180)=""/114, &(0x7f0000000200)=0x72) getsockopt$IP_VS_SO_GET_SERVICE(r3, 0x0, 0x483, &(0x7f0000000240), &(0x7f00000002c0)=0x60) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000300)={'lo\x00', {0x2, 0x4e24, @rand_addr=0xffff}}) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000000380)={0x3, &(0x7f0000000340)=[{}, {}, {}]}) perf_event_open$cgroup(&(0x7f00000003c0)={0x4, 0x70, 0x12c000, 0x3033, 0x3f, 0x0, 0x0, 0xfffffffffffffffe, 0x10000, 0x0, 0x4, 0x100000001, 0x7, 0x6, 0x9, 0x6, 0x3, 0x1f, 0x20, 0x2000, 0x6, 0x4, 0xe0f, 0x92, 0x6, 0x7, 0x10000, 0x6, 0x40, 0x2, 0x1, 0x200, 0x0, 0x8, 0xff, 0xccc, 0x2, 0x100000000, 0x0, 0x1, 0x4, @perf_config_ext={0x9, 0x6}, 0x28086, 0x12bd3d75, 0x400, 0x7, 0x7, 0x1f, 0xfffffffffffffffb}, r2, 0x7, 0xffffffffffffff9c, 0x5) r4 = openat$cgroup_ro(r0, &(0x7f0000000440)='memory.current\x00', 0x0, 0x0) ioctl$KDSETKEYCODE(r4, 0x4b4d, &(0x7f0000000480)={0xffffffffffff6b11, 0x10000}) write$P9_RLINK(r4, &(0x7f00000004c0)={0x7, 0x47, 0x1}, 0x7) r5 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000500)={0xfe, 0x400, 0x1, 0xc4b, 0xa1da, 0x9, 0xfffffffffffffffd, 0x1f, 0x1, 0x15c1, 0xb98c, 0x6}) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000540)={'teql0\x00', {0x2, 0x4e23, @rand_addr=0xffff}}) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) fsync(r0) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f00000005c0)) r6 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000600)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) fcntl$setown(r6, 0x8, r1) ioctl$UFFDIO_UNREGISTER(r6, 0x8010aa01, &(0x7f0000000640)={&(0x7f0000ffb000/0x4000)=nil, 0x4000}) ptrace$poke(0x4, r1, &(0x7f0000000680), 0xfffffffffffffffa) openat$dir(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x2000, 0x0) ioctl$SG_GET_SG_TABLESIZE(r4, 0x227f, &(0x7f0000000700)) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r4, 0x111, 0x3, 0x0, 0x4) syz_open_dev$loop(&(0x7f0000000740)='/dev/loop#\x00', 0xe2e, 0x0) 00:52:49 executing program 3: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000000)={0x7, 0x4, 0x2}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x41, @tick=0x9, 0x7fffffff, {0x9, 0x7}, 0xa7, 0x3, 0x800}) fchdir(r0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x1) getsockopt$sock_int(r1, 0x1, 0x2b, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000180)) prctl$setmm(0x23, 0x7, &(0x7f0000fff000/0x1000)=nil) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='vegas\x00', 0x6) ioctl$TCXONC(r1, 0x540a, 0x7fff) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/checkreqprot\x00', 0x40000, 0x0) signalfd4(r2, &(0x7f0000000300)={0xe2bd}, 0x8, 0x80800) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000380)={0xc000000000000000, 0x400, 0x5, 'queue0\x00', 0x8}) ioctl$KDDISABIO(r2, 0x4b37) signalfd4(r0, &(0x7f0000000440)={0x2}, 0x8, 0x800) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000480)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x2000, 0x1}) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f00000004c0)) pkey_alloc(0x0, 0x0) pwritev(r1, &(0x7f0000000800)=[{&(0x7f0000000500)="102483b66b1d27b646be8bf73dd28d144a7fb3e91eabb3532124608f91e77743463285f399130f0c433ee2c98f7eaf54a223ba673fa24a5dc0227ad8e4430bd0d6cd0f2b6914b86361dbf77763347dd64c4c8ec585b85c24a5909244ed3ee8f701235731454fdcde5f4f82d8dc4f5f58a85ffe9da03e0e821745763e26e7ab119975cb11bca807301df268fafec54c5167a0a529ce1cf4b22f1bd5ff71f2736eb6007944078232", 0xa7}, {&(0x7f00000005c0)="b24b74a1a8da3a0f176f875584a541b380d7be45b2e2744fc33005e8fa2e2310068b2966c18fb04f2c0fc4a69a7b4fbf4fbceeaaef41b0bd49c0535baac062b9c236f77ca34d6eb7f05802d6c3c2fdf02cd516236ec11cf765f608b33e735329c1c6768d399895a91bae94b8bf0bfccfd5dce2022d5705f6827f7013c5023f4882744debba747627a418794d7b25d1c5d466d70f290263467d620ff6f09fdbac6c7fa28775408bcbb9029560a193ceaa2958", 0xb2}, {&(0x7f0000000680)="6b9887c0f341c1400d664cf10edbf1dc40ed341a31df764fef313dd31859220d93469bddb749022121d66daa038a430fb3d9a7de0ff0edd38c540c3784e90b86855175d17d83ec473d964c4ff5141cbd66c29ae10ad0a0230c2f716911041dff6b8b5ac49d3bda63c3ee590881f3742397a9066c78", 0x75}, {&(0x7f0000000700)="047cb613c12660968d1246c9a1e3ace12044bf8cc8921d01365e8ec0d32795fdfbe6664d43834a0241b98b719426efbb1281334345c350f9450df97321e66ebc11865ece3a8b83f3cc3bc72506540a354b1896366d45f4d7d4f2ac6f334c62aea1ce2e11282a2696f61fe0926afcbd1e14b916d5e4bcc8b343e0fb1b4fb7f7587ee85b917693486a127e1c51b04e706db38757d98d352196e80380e20773dc5f6df3618870529e6dd8538433679f2479895efb747cb5e2e9a1bde8e9bf971e89a56c7e968f24dc6e871a83", 0xcb}], 0x4, 0x0) ioctl$sock_SIOCADDDLCI(r3, 0x8980, &(0x7f0000000840)={'tunl0\x00', 0x8}) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000000880)) fcntl$notify(r3, 0x402, 0x8000000a) timer_create(0x0, &(0x7f00000008c0)={0x0, 0x6, 0x2}, &(0x7f0000000900)=0x0) clock_gettime(0x0, &(0x7f0000000940)={0x0, 0x0}) timer_settime(r4, 0x0, &(0x7f0000000980)={{r5, r6+30000000}}, &(0x7f00000009c0)) getsockopt$inet6_buf(r2, 0x29, 0x22, &(0x7f0000000a00)=""/247, &(0x7f0000000b00)=0xf7) ioctl$TCSBRKP(r0, 0x5425, 0x80) connect$inet6(r3, &(0x7f0000000b40)={0xa, 0x4e20, 0x9, @ipv4={[], [0xff, 0xff]}, 0x8001}, 0x1c) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, &(0x7f0000000b80)={0x9, 0x8, 0x100000000, 'queue1\x00', 0x6}) 00:52:49 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x9) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000000)={'bcsh0\x00', 0x8}) ioctl$sock_netdev_private(r0, 0x89fb, &(0x7f0000000040)="c2c39b9f3b78efe3e9ac3254191bca028359cbcd825944b47349850f7dc67e66e4bc108dd99ca6daac462f5d7e32a16fc783e8365c8a4e86088663b72a4d2cb918134a4f9816b8ca69d3c1452dc8c7dae7ef97e83bbda8dda95350ceff31b0d16025644fcbe7793d82605b889af95712ab2d72de8148b988ea6e7c81323741379577bf1a371ce9f4d56980fd92e6600f5837390dd520170eb816") getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000100), &(0x7f0000000140)=0x8) r1 = dup2(r0, r0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000180)={{0xffffffffffffffff, 0x0, 0x401, 0x2, 0x3}, 0x10001, 0x0, 0x1}) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f00000001c0), 0x4) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f0000000240)=0x1) r3 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0xffffffffffffffff, 0x2) openat$cgroup(r3, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) getrandom(&(0x7f0000000300)=""/212, 0xd4, 0x1) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000440)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40040200}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r4, 0x100, 0x70bd26, 0x25dfdbfc, {0x3}, [@FOU_ATTR_PORT={0x8, 0x1, 0x4e22}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r3, 0x227b, &(0x7f0000000540)=0x81) r5 = add_key(&(0x7f0000000580)='.dead\x00', &(0x7f00000005c0)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000600), 0x0, 0xffffffffffffffff) keyctl$invalidate(0x15, r5) timerfd_settime(r1, 0x1, &(0x7f0000000640)={{0x0, 0x1c9c380}}, &(0x7f0000000680)) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f00000006c0)=0x6) add_key$keyring(&(0x7f0000000700)='keyring\x00', &(0x7f0000000740)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffc) r6 = signalfd(r0, &(0x7f0000000780)={0x9}, 0x8) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r6) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) ioctl$RTC_ALM_SET(r3, 0x40247007, &(0x7f00000007c0)={0x2b, 0x3a, 0x6, 0x1c, 0xb, 0x3732000000000000, 0x4, 0xd, 0x1}) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000800)=""/121) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000880), 0x4) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f00000008c0)={'syzkaller1\x00', 0x2}) writev(r1, &(0x7f0000000cc0)=[{&(0x7f0000000900)="d64d01ea226bbd423d1eb1f1c8ae4418e764ac607c7047ab74076b04eb02de50701b0f3a8ef20eea6f0a51a278e28a0049e8ebd02f7adf1109f69f6d7914908136dd68c7de0a0e43650b8c08b2300f7ae23d9ead4d5bfbc17a6d700ce69c217df29ecc38f23004723effbb8cde5e21664b2c1f619830da81c68370145ba97547c3e3c31fa8c3fd09c8429c22c4489a7576d0afe0e44d4c09003e56266acadd47fd6cc4d4dc92d4fd8ce7aa8e47836d81ad4454068fd7eb3463647cd6f3f1fb6c1077bc63481960fa68ff3a80792472fc299c57e4269dffbf", 0xd8}, {&(0x7f0000000a00)="6e7807f0b002e057086026e8b6813921dfba51c5e6b961512f0231430d8c532883d137ed74f352b62256a4a84a6b93e09caa686edee4619f8a66319621fd4b64e1b615467da3bfa17560d993d42822e3aa13ab12e23a73b15d082e03d349bafafd016b045be2b531d9b00ab5e99ab83b17ba98ccdb60bca299efc810ba5358b0f98e", 0x82}, {&(0x7f0000000ac0)="baf5f3a04a4771109aa6a330d16a64d455123f0073a533924f76ad28ad34431d62dc895481b150135095638a1fdb528c11537ddbef6d0887d83dae57b74ad0e3a13d1acb0b60ad34e83832529d09d96b3b49dcf4275f618fb59c9d2fd133472dd107baaece2ca9d790998560b16d35771164d1b7159de75977aea941797867d6fdf44de5b6d784bf06dcb38fe5881a39d2d722c06d2e9d14873a8b", 0x9b}, {&(0x7f0000000b80)="722b59cb4e666dc5a70abd0bce85483c1436", 0x12}, {&(0x7f0000000bc0)="8c12eafaef6abb84ec6e4a4cb066d5196ee0be8b691ba80135fcce1c9be18e2003c64d34d2e012345e569275b9ec6fdd4e9511a239c2e51354bf0375d59be1c2285286e5cdf89f0826d8b8b2ec480da5b2adbd8dbc5a8652f87209a2c23c4ab4a25aa000c6b7b8bb0fae0f35bc6d4225c52d4f3a0198427cbe80ffca2617ce1dabc57424b02b3025598b02f799efe30d4730e6a3cd7716ca3d483b5f697be05d837ab87959bba9f563a5a25f83a6fbe92de7a92c1a906502f39b58bcb09168941c34da0f675c8359561df5750c16aabed54794d7be60e56240f146633ec0024b74c4fdc69b24d0c9061a09", 0xeb}], 0x5) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000d00)={@rand_addr=0xfffffffffffffffe, @broadcast=0xffffffff, 0x0, 0x1, [@loopback=0x7f000001]}, 0x14) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000d80)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x28002300}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x24, r7, 0x4, 0x70bd2b, 0x25dfdbfe, {0x2}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x92f3}]}, 0x24}, 0x1, 0x0, 0x0, 0x804}, 0x20000800) 00:52:49 executing program 5: lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='pids.events\x00', 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x1800, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_any='access=any', 0x2c}, {@access_any='access=any', 0x2c}, {@access_any='access=any', 0x2c}, {@noextend='noextend', 0x2c}]}}) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@nodevmap='nodevmap', 0x2c}, {@dfltgid={'dfltgid', 0x3d, r0}, 0x2c}, {@mmap='mmap', 0x2c}, {@version_L='version=9p2000.L', 0x2c}]}}) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000380)={0xaa}) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f00000003c0)='teql0\x00') ioctl$GIO_CMAP(r4, 0x4b70, &(0x7f0000000400)) syncfs(r1) write$P9_RXATTRWALK(r3, &(0x7f0000000440)={0xf, 0x1f, 0x2, 0x1}, 0xf) ioctl$sock_SIOCBRADDBR(r3, 0x89a0, &(0x7f0000000480)='ip6tnl0\x00') r5 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/load\x00', 0x2, 0x0) fallocate(r1, 0x53, 0x400, 0x11) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000700)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)={0x114, r6, 0xc02, 0x70bd2b, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local={0xac, 0x14, 0x14, 0xaa}}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2e, 0x5}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x26}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback={0x0, 0x1}}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x123}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x91}, 0x4000) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000740)={0x80, 0x1, 0x80000001, 0xc0, 0x6}) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x6, 0x4) chdir(&(0x7f0000000780)='./file0\x00') setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0x5, &(0x7f00000007c0)=0x7, 0x4) r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000800)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000840)=0x10000) ioctl$RTC_UIE_ON(r1, 0x7003) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000a00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40202800}, 0xc, &(0x7f00000009c0)={&(0x7f00000008c0)={0xf4, r6, 0x200, 0x70bd28, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffffffffffd}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback=0x7f000001}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x60, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0xf}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1e}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2={0xff, 0x2, [], 0x1}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x23, 0x22}}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x87}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'fo\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xeb}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7edb}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffffffffffe}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfe}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4084}, 0x4000) getpeername$inet(r7, &(0x7f0000000a40)={0x0, 0x0, @multicast1}, &(0x7f0000000a80)=0x10) shutdown(r4, 0x1) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000ac0), &(0x7f0000000b00)=0x14) readv(r4, &(0x7f0000000d40)=[{&(0x7f0000000b40)=""/30, 0x1e}, {&(0x7f0000000b80)=""/213, 0xd5}, {&(0x7f0000000c80)=""/138, 0x8a}], 0x3) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000d80)='/selinux/checkreqprot\x00', 0x420000, 0x0) write$cgroup_int(r2, &(0x7f0000000dc0)=0x80, 0x12) 00:52:49 executing program 1: r0 = perf_event_open$cgroup(&(0x7f0000000040)={0x5, 0x70, 0x9, 0x5, 0xe1ca, 0x1, 0x0, 0x4, 0x240, 0x3, 0x9, 0x9, 0x3, 0xffffffff, 0x7, 0x7, 0x8000, 0x6, 0x100000001, 0xfffffffffffffffd, 0x1000, 0x1, 0x7, 0x0, 0x8, 0x7, 0xffffffffffffffd7, 0x7, 0x28, 0x101, 0x101, 0x3, 0x80000001, 0x1, 0x2, 0xff1, 0x401, 0xfffffffffffffffa, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000000), 0x4}, 0x0, 0xf77, 0xfffffffffffffc00, 0x0, 0x100000001, 0x800, 0xfff}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x4) fallocate(r0, 0x8, 0x5, 0x1000) r1 = add_key(&(0x7f0000000200)='encrypted\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000280)="71fb3e975b47e006234e6726039aedcf8b9a576fdb0909ce2067028aa8eeb1676fd2657f7ebed0e38a208164ac26163cdd53f94d0a7310393cd3b3c71c7efbf86a487600b864539111ad0c4f4865583d92ce5795170932444b8ce00973b7bd", 0x5f, 0xffffffffffffffff) add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000140)="ce8173f13b658fa499dca1d7cc265315f11105ff4eb6559c6a1fb323a65487758c0aee48d5235725f52cc248b9c13d559074a62b303d956c8766007ae5e473e2f2645410d71fea934a6d13cfaeeb8b88610a9eaf45f90802e4e6de138fba7ed5537933c8b0541a953cc991a7f762d1a334dbd20628bde1b831b77c4f2a8a554fb5f04f506a180dbffd5c2ca821e8dcff49efc638fd70b6c17e6b36094ddaccdfeb1fcabe4a510d6e97c0df03587b91f3db5d", 0xb2, r1) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x42) add_key(&(0x7f0000000340)='.request_key_auth\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a, 0x2}, &(0x7f00000003c0)="a99555b25e7b9bc3482e98c190f2c50b75a3633e62783b23c2c503386d072426b7e040396a2531f2a9339d2e51e433cabede2e2ad1d96223c02d5dcfd8082740673f94fd7b8dc4de69e2cd3e93d3c9c973da8bc378d07deb7ee5b517d5e4f0d75d592761a19011258f12280ab268120185ecdc79e9ffbb0a6387de603a92a148d5706c85b0f9f29b0dec1897f62936e33f3361cf0985628dd66afd2ebb0b5c", 0x9f, 0xfffffffffffffff9) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, &(0x7f0000000480)={'ip6gretap0\x00', {0x2, 0x4e22}}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f00000004c0)={0x10}) pause() write$binfmt_misc(r2, &(0x7f0000000500)={'syz0', "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"}, 0x1004) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000001540)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001580)='net/sockstat6\x00') pread64(r4, &(0x7f00000015c0)=""/135, 0x87, 0x0) ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f00000016c0)={0x4, &(0x7f0000001680)=[{0x4, 0x8}, {0x800, 0x4080000000}, {0x5, 0xff}, {0x1, 0x85}]}) r5 = add_key(&(0x7f0000001700)='rxrpc_s\x00', &(0x7f0000001740)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffff8) clock_adjtime(0x3, &(0x7f0000001780)={0xffff, 0x2, 0x86, 0x3, 0xed4, 0x7, 0x9, 0x10001, 0x0, 0x2, 0x81, 0x2, 0x3, 0x16, 0x7, 0x2, 0x3, 0x9, 0x9, 0x0, 0x8001, 0x1, 0x7af, 0x10001, 0x5}) ioctl$BLKIOMIN(r4, 0x1278, &(0x7f0000001800)) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000001840), &(0x7f0000001880)=0x14) prctl$setendian(0x14, 0x2) keyctl$search(0xa, r5, &(0x7f00000018c0)='.dead\x00', &(0x7f0000001900)={0x73, 0x79, 0x7a, 0x2}, r1) getsockopt$ARPT_SO_GET_INFO(r2, 0x0, 0x60, &(0x7f0000001940)={'filter\x00'}, &(0x7f00000019c0)=0x44) ioctl$EVIOCGABS3F(r2, 0x8018457f, &(0x7f0000001a00)=""/147) ioctl$PPPIOCGFLAGS(r4, 0x8004745a, &(0x7f0000001ac0)) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) acct(&(0x7f0000001b00)='./file0\x00') getsockopt$ARPT_SO_GET_ENTRIES(r4, 0x0, 0x61, &(0x7f0000001b40)={'filter\x00', 0x1000, "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"}, &(0x7f0000002b80)=0x1024) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002bc0)={0xaa, 0x1}) timer_create(0x5, &(0x7f0000002c00)={0x0, 0x4, 0x1, @tid=r3}, &(0x7f0000002c40)) linkat(r2, &(0x7f0000002c80)='./file0\x00', r4, &(0x7f0000002cc0)='./file0\x00', 0x1000) 00:52:49 executing program 6: r0 = socket$inet(0x2, 0x806, 0x8000) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x2f, @remote={0xac, 0x14, 0x14, 0xbb}, 0x4e24, 0x3, 'nq\x00', 0x20, 0x2, 0x35}, 0x2c) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'bpq0\x00', 0x2}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0xf7) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000080)) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000100)={@multicast1, @rand_addr, 0x0}, &(0x7f0000000140)=0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'\x00', r2}) getsockopt$netlink(r1, 0x10e, 0x9, &(0x7f00000001c0)=""/182, &(0x7f0000000280)=0xb6) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x6, 0x7, 0x0, 0xe, 0x10, 0x1, "bb613e327b0ae94009f5489e228c7155d8d41b16dc9024aeab317b8b91cfe9b1aa88639c611717ec384c3f0e05fc9d63135703eb7f0b3693268e52939302cc4c", "66b454ca5601a9d594426608e4cde8a2f0d2026daee2f66ef49e2013e7a40c83e03583cb4a8919c8b74a0866bd1c489e2592fa5a90a4167028c8193dff8b9e7b", "0d9fceb3c4602fd6a1fbca2836d601d226bcf275f5367a5386cf259ddce138ec", [0x6]}) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f00000003c0)=""/33) socket$inet(0x2, 0xa, 0x9) ioctl$PIO_UNIMAPCLR(r1, 0x4b68, &(0x7f0000000400)={0x885, 0x1, 0x7fff}) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) umount2(&(0x7f0000000480)='./file0\x00', 0x8) ioctl$KDSKBLED(r1, 0x4b65, 0x10001) ioctl$SG_GET_REQUEST_TABLE(r1, 0x2286, &(0x7f00000004c0)) setsockopt$inet_tcp_buf(r1, 0x6, 0x0, &(0x7f0000000600)="319d9be3d527c4dded1a6bc28af7c501fcf25e7057c5a29a795f94dfea586be9b4b407394f258400315642fc94066bd423d396fd1e427e03e985775074513fb7b8ce5902435044405d803b7d2a58d8c29ac4066050b169e185c2cfa9cea078ede22dd338d9f8f486965eed566ac64ce8c25113855825f45df5ce883b1f98ef135590fc389edc1924c8eb763c9b542e771daba5ab259ee55aa4ac34ec74898e8cd24d1e3c7287507a8cd2d3277e73b8b735b9506e7d43e46e", 0xb8) ioctl$KDADDIO(r1, 0x4b34, 0x9) r5 = socket(0x1, 0x807, 0x2) ioctl$sock_proto_private(r3, 0x89ec, &(0x7f00000006c0)="a72b5e5a59617b87f6ffd0dd23969f32e6d596cce755d2b24c2e9eaf3562d0478efb1605e90a8c38a1609190fea1e92e39b96232") write$P9_RLERRORu(r1, &(0x7f0000000700)={0xd, 0x7, 0x1, {{}, 0xff}}, 0xd) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000740)={0x80000000, 0x7, 0x401, 0x0, 0x80000001}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000780)='/dev/sequencer\x00', 0x1c0, 0x0) ioctl$fiemap(r1, 0xc020660b, &(0x7f00000007c0)={0x0, 0x7, 0x2, 0x400, 0x1, [{0x0, 0x6, 0x5, 0x0, 0x0, 0x2000}]}) connect$packet(r1, &(0x7f0000000840)={0x11, 0x1f, r2, 0x1, 0x6816, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) fallocate(r1, 0x50, 0x1, 0x4) shutdown(r5, 0x1) getpid() setsockopt$inet6_MCAST_LEAVE_GROUP(r4, 0x29, 0x2d, &(0x7f0000000880)={0x52c0, {{0xa, 0x4e20, 0x7, @mcast2={0xff, 0x2, [], 0x1}, 0x7}}}, 0x84) 00:52:49 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) socketpair(0xa, 0x4, 0x5, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000040)={'filter\x00'}, &(0x7f00000000c0)=0x54) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) ioctl$TUNSETGROUP(r1, 0x400454ce, r4) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000180), &(0x7f00000001c0)=0x14) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0xc) pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff}, 0x80800) syz_open_dev$usbmon(&(0x7f00000002c0)='/dev/usbmon#\x00', 0x6, 0x40) link(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00') mknod(&(0x7f0000000380)='./file0\x00', 0xc000, 0x9) signalfd(r5, &(0x7f00000003c0)={0x83}, 0x8) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, &(0x7f0000000400)=r2) ioctl$PPPIOCSMRU(r2, 0x40047452, &(0x7f0000000440)=0x5) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480)='IPVS\x00') unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) getpeername$unix(r2, &(0x7f0000000500)=@abs, &(0x7f0000000580)=0x6e) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x2c, r6, 0x4, 0x70bd27, 0x25dfdbff, {0x7}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x10) getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f00000006c0)=""/241, &(0x7f00000007c0)=0xf1) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$key(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x2, 0x14, 0x5, 0x9, 0x4, 0x0, 0x70bd29, 0x25dfdbfb, [@sadb_spirange={0x2, 0x10, 0x4d6, 0x4d4}]}, 0x20}, 0x1}, 0x20000000) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f00000008c0)=0x18, 0x4) r7 = openat(r2, &(0x7f0000000900)='./file0\x00', 0x2000, 0x20) linkat(r1, &(0x7f0000000940)='./file0\x00', r7, &(0x7f0000000980)='./file0\x00', 0x1400) connect$inet(r1, &(0x7f00000009c0)={0x2, 0x4e22, @multicast2=0xe0000002}, 0x10) symlinkat(&(0x7f0000000a00)='./file0\x00', r1, &(0x7f0000000a40)='./file0\x00') sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f0000000c00)={&(0x7f0000000a80)={0x10}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0xf4, r6, 0x103, 0x70bd27, 0x25dfdbfd, {0xf}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffffffffffffb}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xbf}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller1\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3b}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x75}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x15}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x100}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x1950}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x1000}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x81}]}, 0xf4}, 0x1, 0x0, 0x0, 0x20048001}, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0xe70d) [ 52.858927] IPVS: Creating netns size=2536 id=1 [ 52.915181] IPVS: Creating netns size=2536 id=2 [ 52.943965] IPVS: Creating netns size=2536 id=3 [ 52.980377] IPVS: Creating netns size=2536 id=4 [ 53.016104] IPVS: Creating netns size=2536 id=5 [ 53.073768] IPVS: Creating netns size=2536 id=6 [ 53.126219] IPVS: Creating netns size=2536 id=7 [ 53.195038] IPVS: Creating netns size=2536 id=8 [ 53.698060] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 53.719186] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 53.764098] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 53.790003] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 53.826511] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 53.838826] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 53.888919] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 53.959461] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 53.982870] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 54.031524] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 54.067358] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 54.087143] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 54.100518] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 54.116717] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 54.134848] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 54.153054] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 54.165306] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 54.227210] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 54.241869] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 54.276057] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 54.290946] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 54.336495] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 54.351529] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 54.372302] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 54.387812] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 54.407508] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 54.416289] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 54.438530] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 54.458772] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 54.473766] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 54.494845] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 54.528773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.563848] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 54.574022] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 54.588815] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.596461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.612842] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 54.626733] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 54.639163] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 54.663264] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 54.684039] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.692498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.702151] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 54.712919] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 54.726540] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 54.735767] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 54.747662] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 54.756751] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 54.767267] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.774989] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.788329] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 54.799166] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 54.815311] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 54.829758] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.838443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.846079] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.854607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.863193] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 54.879872] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 54.887818] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.895468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.910271] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 54.927573] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.935875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.951870] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 54.968738] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 55.010986] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 55.020554] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.029251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.044421] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 55.053664] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 55.073996] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.085351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.095862] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 55.108700] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 55.123720] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 55.132464] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 55.165550] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.173347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.181154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.189118] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.203204] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 55.218825] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 55.231374] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.240215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.256457] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 55.266208] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 55.276390] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.284269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.294994] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.302556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.330322] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 55.351824] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.361167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.703321] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 57.875946] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 57.927404] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 57.933599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.946015] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.965486] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 58.044326] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 58.059723] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 58.068308] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 58.075558] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 58.086202] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.097586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.176408] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 58.189762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.196599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.217562] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 58.256615] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 58.280164] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 58.287863] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.294685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.307409] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 58.324329] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 58.332136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.343343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.362926] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.370068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.434421] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 58.446688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.454298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.510212] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 58.532034] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.540799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 00:52:56 executing program 7: mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="6d6f64653d303030303e3030303030310430303030303030303030"]) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) delete_module(&(0x7f0000000240)='\\$proc(*,\x00', 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000280)='./file0\x00') timer_create(0x3, &(0x7f0000000040)={0x0, 0x17, 0x2}, &(0x7f0000000080)=0x0) timer_getoverrun(r0) mount(&(0x7f0000000000)='./file1\x00', &(0x7f0000000880)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f00000001c0)) setxattr(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200)=@known='system.posix_acl_access\x00', &(0x7f00000002c0)='\\$proc(*,\x00', 0xa, 0x1) 00:52:56 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) getsockopt$inet6_int(r0, 0x29, 0x49, &(0x7f0000000480), &(0x7f00000004c0)=0x4) [ 59.598704] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9677 sclass=netlink_route_socket pig=5924 comm=syz-executor0 00:52:56 executing program 7: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x20000000020005) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x14}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)) epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0x0) 00:52:57 executing program 0: r0 = socket$inet6(0xa, 0x80000, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000700)=ANY=[@ANYBLOB="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"]}) getresuid(&(0x7f00000003c0), &(0x7f0000000480), &(0x7f0000000440)) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0xa, 0x8000b, 0x79) getsockopt$inet6_buf(r1, 0x29, 0x0, &(0x7f0000000140)=""/243, &(0x7f0000000000)=0xf3) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0xfffffffffffff533, 0x4, 0x3000}, 0x4) getsockopt$inet6_tcp_int(r1, 0x6, 0x0, &(0x7f0000000080), &(0x7f00000004c0)=0x4) 00:52:57 executing program 7: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x40045564, 0x0) mount(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='hugetlbfs\x00', 0x102080, &(0x7f0000000140)="cc9072369b17ab6c07c2803c9a2ff4eb57f3c93b982ff630c304cdabf1e233d6776f0a0396120cf32a6c4669a407113236a251d484a7d2a9df3b6b867f22c249b80ed7bff6") openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) [ 59.690449] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9677 sclass=netlink_route_socket pig=5949 comm=syz-executor0 00:52:57 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="020d000010000000000002000000e000000100000000000000000800120002000200000000000000000010000000020300000000000f00000000020000000000000092ab0300006e09bcf9d5bd100001020014bb0000000000000000000000fa3c05cf548e548a0002008000000000010000000002000000000000000000009b2b2d895681ce47298621c11883f941e8291406242d77368cafec9531a6520f6454727dabc4ad7d59d572563361d8"], 0x80}, 0x1}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x7fb) ioctl$EVIOCSABS3F(r1, 0x401845ff, &(0x7f0000000000)={0x4, 0x7, 0xfffffffffffffff7, 0x9, 0x5, 0x9}) rt_sigaction(0x2c, &(0x7f00000002c0)={0x4, {0x5}, 0x2, 0x2}, &(0x7f0000000300), 0x8, &(0x7f0000000600)) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f0000000240)=ANY=[]) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000140)={{{@in6=@loopback, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@dev}}, &(0x7f00000000c0)=0xe8) ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000280)=""/50) sendmsg$nl_xfrm(r2, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)=@migrate={0x190, 0x21, 0x800, 0x70bd2d, 0x25dfdbfe, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, @in6, 0x4e20, 0x0, 0x4e21, 0x0, 0xa, 0x20, 0xa0, 0x3a, 0x0, r3}, 0x0, 0x1}, [@migrate={0x138, 0x11, [{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x33, 0x7, 0x0, 0x3503, 0xa, 0xa}, {@in, @in6=@local={0xfe, 0x80, [], 0xaa}, 0x7c, 0x0, 0x0, 0x3502, 0xa, 0x2}, {@in=@multicast2=0xe0000002, @in6=@mcast2={0xff, 0x2, [], 0x1}, 0x2b, 0x0, 0x0, 0x3503, 0xa, 0xa}, {@in6=@mcast2={0xff, 0x2, [], 0x1}, @in=@multicast2=0xe0000002, 0x33, 0x1, 0x0, 0x3507, 0x2, 0xa}, {@in6=@ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @in6=@local={0xfe, 0x80, [], 0xaa}, 0xff, 0x3, 0x0, 0x3501, 0x2, 0xa}, {@in6=@remote={0xfe, 0x80, [], 0xbb}, @in6=@mcast1={0xff, 0x1, [], 0x1}, 0xff, 0x3, 0x0, 0x3507, 0xa, 0x2}, {@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@dev={0xac, 0x14, 0x14, 0xa}, 0x0, 0x1, 0x0, 0x34ff, 0x2, 0xa}]}, @output_mark={0x8, 0x1d, 0x81}]}, 0x190}, 0x1, 0x0, 0x0, 0x40800}, 0x44) 00:52:57 executing program 3: rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x4) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f00000002c0)={{0xff, @rand_addr=0x2, 0x4e22, 0x0, 'dh\x00', 0x22, 0x1a, 0x4e}, {@empty, 0x4e20, 0x10007, 0x7ff, 0x800, 0x6}}, 0x44) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000100)={{{@in6=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}}}, &(0x7f0000000200)=0xe8) getgroups(0x6, &(0x7f0000000240)=[0x0, 0xee01, 0x0, 0xee01, 0xffffffffffffffff, 0xee00]) rmdir(&(0x7f0000000280)='./file0\x00') chown(&(0x7f00000000c0)='./file0\x00', r1, r2) 00:52:57 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000013000)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000004ff0)={0x2, &(0x7f0000002fe8)=[{0x45}, {0x6}]}, 0x8) 00:52:57 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e22, 0x81, @dev={0xfe, 0x80, [], 0xf}, 0x100000000}, {0xa, 0x4e22, 0x1f, @mcast1={0xff, 0x1, [], 0x1}, 0x2}, 0x200, [0x40, 0x8001, 0x9dd3, 0x5, 0x1000, 0x8, 0x1]}, 0x5c) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f00000001c0), 0x1) 00:52:57 executing program 0: munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000b) [ 59.821861] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=5993 comm=syz-executor4 00:52:57 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@setlink={0x3c, 0x13, 0x311, 0x0, 0x0, {}, [@IFLA_TXQLEN={0x8, 0xa}, @IFLA_IFNAME={0x14, 0x3, 'team_slave_1\x00'}]}, 0x3c}, 0x1}, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x400000, 0x0) ioctl$TIOCLINUX5(r1, 0x541c, &(0x7f0000000080)={0x5, 0x8, 0xe2, 0x9, 0x401}) [ 59.872195] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=27426 sclass=netlink_audit_socket pig=5993 comm=syz-executor4 [ 59.894605] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=28 sclass=netlink_audit_socket pig=5993 comm=syz-executor4 [ 59.950885] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=5993 comm=syz-executor4 [ 59.951038] syz-executor6 uses obsolete (PF_INET,SOCK_PACKET) [ 59.977533] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=27426 sclass=netlink_audit_socket pig=5993 comm=syz-executor4 00:52:57 executing program 4: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x80, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000000c0)={0x0, @loopback, @local}, &(0x7f0000000180)=0xc) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) close(r1) socket$packet(0x11, 0x2, 0x300) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="74733d66b9ed7444d001da5a000000", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) 00:52:57 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={&(0x7f0000000340)={0x10}, 0xc, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001800010e00000000000000000200008000000007000000000c0040d05e633139529cf8cb30ae977f043cf993594bcf96b3449a5b7ca00d09f94577b85b44", @ANYRES32=0x0, @ANYBLOB="080004000000075f"], 0x30}, 0x1}, 0x0) [ 59.981174] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=28 sclass=netlink_audit_socket pig=6035 comm=syz-executor4 [ 60.024389] 9pnet_virtio: no channels available for device (null) [ 60.037406] 9pnet_virtio: no channels available for device (null) 00:52:57 executing program 1: socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000040)) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000680)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB="230000d3a81fe6002f002a05000000000000000000ecd31b", @ANYRES32=0x0, @ANYBLOB="ff6f039e2acee8030f78b3c6e949bac8833914be2ab83f8546508801bf3953fe8538ffe47b0761997b91bcabbf1bd332dec301e54368b79486d00c547b97c3bdd47094f9ae85415afbb5f3ebb2bfce0b0315cd9b7071e1168a0d81b4f0444c26301115667b3d92b3f6c10ab48ee0a7dd32a14591"], 0x24}, 0x1}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00'}) 00:52:57 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e22, 0x81, @dev={0xfe, 0x80, [], 0xf}, 0x100000000}, {0xa, 0x4e22, 0x1f, @mcast1={0xff, 0x1, [], 0x1}, 0x2}, 0x200, [0x40, 0x8001, 0x9dd3, 0x5, 0x1000, 0x8, 0x1]}, 0x5c) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f00000001c0), 0x1) 00:52:57 executing program 5: r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x4}) mq_unlink(&(0x7f0000000100)='eth0\x00') mq_timedsend(r0, &(0x7f00000e6000), 0x0, 0x0, &(0x7f0000e0b000)) mq_timedsend(r0, &(0x7f0000000080), 0x0, 0x0, &(0x7f00000000c0)) mq_open(&(0x7f0000000040)='em1mime_type\x00', 0x42, 0x149, &(0x7f0000000080)={0xd5e1, 0x8, 0x5, 0x4, 0xffffffff, 0x7, 0x1, 0x3f}) close(r0) 00:52:57 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/mls\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000dc0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40002}, 0xc, &(0x7f0000000d80)={&(0x7f0000000480)={0x8e0, 0x0, 0x300, 0x70bd26, 0x25dfdbfc, {0x3}, [{{0x8, 0x1, r1}, {0x17c, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8, 0x3, 0x5}, {0xc, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r1}}, {0x8, 0x7}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x7fffffff}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x6804694d}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8, 0x3, 0x5}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r1}}}]}}, {{0x8, 0x1, r1}, {0xbc, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8, 0x3, 0xe}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r1}}}]}}, {{0x8, 0x1, r1}, {0xbc, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8, 0x3, 0x5}, {0xc, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x100000000}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r1}}}]}}, {{0x8, 0x1, r1}, {0x44, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r1}}}]}}, {{0x8, 0x1, r1}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x40}}}]}}, {{0x8, 0x1, r1}, {0x1a4, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8, 0x3, 0x5}, {0xc, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0xeccc}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x2}}}]}}, {{0x8, 0x1, r1}, {0x108, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x20}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r1}}, {0x8, 0x7}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8, 0x3, 0x5}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8, 0x3, 0xe}, {0x8, 0x4, 0x7ff}}, {0x8, 0x6, r1}}}]}}, {{0x8, 0x1, r1}, {0x1dc, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8, 0x3, 0x5}, {0xc, 0x4, 'random\x00'}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0xd3ab}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8, 0x3, 0x5}, {0x10, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0xa0}}}]}}, {{0x8, 0x1, r1}, {0x3c, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r1}}}]}}, {{0x8, 0x1, r1}, {0x44, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r1}}}]}}]}, 0x8e0}, 0x1, 0x0, 0x0, 0x4000}, 0x44000) r3 = dup(r0) clock_gettime(0xffffffffffffffff, &(0x7f0000000ec0)={0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) write$sndseq(r3, &(0x7f0000000280)=[{0xa75a, 0x5, 0x1ff, 0xea, @tick=0x5, {0xffffffffffffffd0, 0x5}, {0x7, 0xffffffff80000001}, @result={0x4, 0x7f}}, {0x2, 0x7e67, 0xec8, 0x6, @time={r4, r5+10000000}, {0x9, 0x6}, {0xfffffffffffffff9, 0x1}, @queue={0x9, {0x8, 0x8}}}, {0x6, 0x3f, 0x8, 0x10001, @tick=0x6, {0x6, 0x6}, {0x9, 0x6}, @ext={0x5a, &(0x7f0000000200)="db9fb0126b2d42c4251ddc1a1dcdaadc0e0d3c178146f1e9006b33a96e7253b9ba341a086847ef08edb1fbb9e658ef7b9271921ff3595ec157e7bb4dcdad8966883496fa3faa00752833b9efb4ead24a3e248c5ac077c05bbbd5"}}, {0x5, 0xfff, 0x3, 0xdbc, @time, {0x30000000000000, 0x5}, {0x4, 0x4}, @time=@time={0x0, 0x1c9c380}}, {0x3, 0x4, 0x4, 0xfb8, @time={0x0, 0x1c9c380}, {0x20, 0xfffffffffffff800}, {0x7, 0x101}, @queue={0x4, {0x2e, 0x4}}}, {0x0, 0x0, 0x10000, 0x8, @tick=0x3, {0x3, 0x80}, {0x800, 0x2}, @connect={{0x5, 0x3}, {0x4, 0x45}}}, {0x8, 0x1, 0x3b13e3d5, 0x1, @tick=0x1ff, {0x8000}, {0x5, 0xffff}, @time=@time}, {0x0, 0x3f, 0x4ad, 0x3, @tick=0x401, {0x6, 0x3ff}, {0x2, 0x7f}, @result={0x0, 0xffff}}], 0xe0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$KDGKBENT(r3, 0x4b46, &(0x7f0000000e00)={0x8, 0x2, 0x10001}) clock_getres(0x7, &(0x7f0000000380)) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0405405, &(0x7f0000000e40)={{0x1, 0x3, 0x1, 0x1}, 0x2, 0x2, 0x7}) fcntl$setlease(r2, 0x400, 0x0) write$sndseq(r3, &(0x7f0000000100)=[{0x1, 0x6, 0x586a, 0x2, @tick=0x17c1aa0e, {0x9, 0xc576}, {0x2, 0xfffffffffffffff9}, @addr={0xfe9, 0x9}}, {0x2, 0xc7, 0x9, 0x3a2a, @time={r6, r7+30000000}, {0x200, 0x800}, {0x6, 0x1}, @queue={0x6ca70990, {0xfffffffffffff36c, 0xee7}}}], 0x38) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00^\x00\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r1, @ANYBLOB="71000010000000000000ded386700000"], 0x24}, 0x1}, 0x0) 00:52:57 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$inet(0x2, 0xe, 0x8, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100), &(0x7f0000000140)=0x14) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0x0, 0xffffffffffeff010}, {0x6}]}, 0x8) write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='syz+'], 0x4) 00:52:57 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req={0x7, 0x7fff, 0x5, 0x6358}, 0xffffffffffffff9c) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x0, 0x0) ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f00000001c0)={0x400, 0x0, 0x3, 0xffffffffffffffff, 0x200, 0xfc0}) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000080), &(0x7f0000000140)=0x8) sendmmsg(r0, &(0x7f000000c300)=[{{&(0x7f00000000c0)=@nfc={0x27, 0x1}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000900)}}, {{&(0x7f0000002400)=@ipx={0x4, 0x0, 0x0, "527fc4f4b987"}, 0x80, &(0x7f00000057c0), 0x0, &(0x7f0000005880)}}], 0x2, 0x0) 00:52:57 executing program 6: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) keyctl$setperm(0x5, r0, 0x8000000) keyctl$assume_authority(0x10, r1) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x400, 0x0) readlink(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)=""/130, 0x82) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x100000001) geteuid() socket$inet_icmp_raw(0x2, 0x3, 0x1) keyctl$search(0xa, r0, &(0x7f0000000080)='keyring\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x0}, r1) keyctl$assume_authority(0x10, r0) 00:52:57 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0xa838643e45b75e4, 0x0) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000000080)) r1 = socket(0x1000000000000010, 0x80802, 0x0) r2 = dup(r1) write(r2, &(0x7f0000000000)="2400000058001f02ff07f4f9002304000a04f511080001000201009f0800028001000000", 0x24) 00:52:58 executing program 0: mmap(&(0x7f0000f97000/0x2000)=nil, 0x2000, 0x0, 0x31240751e8b0587d, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x80) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000040)=""/4096) 00:52:58 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x20010000) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2=0xe0000002}, 0x4}}, 0x2e) 00:52:58 executing program 6: r0 = socket$packet(0x11, 0x808000000002, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffd}, 0x4) r1 = socket(0x200000000000011, 0x4000000000080002, 0x8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) bind$packet(r1, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x14) sendmsg$key(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_nat_t_type={0x1, 0x14}]}, 0x18}, 0x1}, 0x0) getpeername$packet(r1, &(0x7f0000000040), &(0x7f00000000c0)=0x14) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000100)=0x0) capset(&(0x7f0000000180)={0x19980330, r3}, &(0x7f0000000240)={0x4, 0x5, 0x7, 0x7fffffff, 0x1, 0x1}) 00:52:58 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0xffffffffffffffff, 0x21, 0x0, @buffer={0x0, 0x96, &(0x7f0000000180)=""/150}, &(0x7f0000000440)="7f0002c0d023d7cdcba017933d0c84763f1854263d858a2e8c56907eb180c13443", &(0x7f0000000500)=""/239}) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0xac, 0x3, @scatter={0x4, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/88, 0x58}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000000100)=""/46, 0x2e}, {&(0x7f0000000140)}]}, &(0x7f0000000340)="e0dcb01b488d00cdf3451d70b58c607aac19bce03dd1c79927fe3cb13701df4539221197a8913422623f6640d05d74cf0d09fb59b8138fbc8d415ec46b46f6d9770eaf44f3692688c7a0952761e71d2c0f8f77cfe46f53a71797c6b41a6c359c817a5f2e6521329bd2cd1f29c00f27720df71b469df3625e5f69b4c1c8fd4b6f43d01fbe92a778204b208fac656d1e91889ef7afb8580b36ad9ce7ffd9654744fa2e78e65325c8ef7595d2c5", &(0x7f0000001600)=""/161, 0x3, 0x30, 0x0, &(0x7f0000000280)}) unlink(&(0x7f0000000400)='./file0\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000140)=0x2) 00:52:58 executing program 5: prctl$intptr(0xa, 0x735b) r0 = socket(0x18, 0x0, 0x1) connect(r0, &(0x7f0000dcd000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x2}}, 0x2e) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000f4, 0x0) close(r0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'b\x00', 0x0}) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000040)={r2, 0x1, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x1d}}, 0x10) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000080)=@generic={0x2, 0x4, 0x41}) [ 60.722712] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5 sclass=netlink_route_socket pig=6061 comm=syz-executor2 00:52:58 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000000)=0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x0, r2}) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f00000001c0)=""/216) 00:52:58 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x3) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000040)) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'bridge_slave_1\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="2000000000000000a8b7d5995d8085b3359e6f8a084bb7cbbf5d4727e31f21554a448c5a054620ec8a53b96a3c30fe4e4e8e894ccb680731aa64d43b7f1926d430698c500da7fe332db48aad21a12e028999268342c9e847577faec86b85a7e728ed8bb8071512cbd97cc8bfb4ff735e084e1d436d3a6ee9afd470ce6f0cea84f8cf1431df320ac8d19c81f599d506851078151de34a6f30c8f38026eb9a878b21b8db3804328c1e0386ab63c959f8a184f48206355f23fc8e990c72ffc9be4ede"]}) [ 60.764480] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8104 sclass=netlink_route_socket pig=6073 comm=syz-executor1 00:52:58 executing program 3: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) sched_rr_get_interval(r0, &(0x7f0000000080)) futex(&(0x7f0000000040)=0x1, 0xb, 0x1, &(0x7f0000000100)={0x77359400}, &(0x7f00000000c0), 0x0) r1 = gettid() sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)}, 0x0) timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 00:52:58 executing program 4: socket(0xa, 0x800000007, 0x8) ioctl$sock_ifreq(0xffffffffffffffff, 0x8990, &(0x7f0000000040)={'veth0_to_bridge\x00', @ifru_data=&(0x7f0000000080)="0320c8f5d474862de666005475d1713bfb0881e479670e5e87b5ccd70a24c21d"}) [ 60.810330] sd 0:0:1:0: [sg0] tag#463 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 60.810348] sd 0:0:1:0: [sg0] tag#463 CDB: Variable length, sa=0xcba0 00:52:58 executing program 0: socket$netlink(0x10, 0x3, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x82) pwritev(0xffffffffffffffff, &(0x7f0000000980)=[{&(0x7f00000007c0)="9d", 0x1}], 0x1, 0x0) close(r0) 00:52:58 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000000)=0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x0, r2}) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f00000001c0)=""/216) [ 60.810384] sd 0:0:1:0: [sg0] tag#463 CDB[00]: 7f 00 02 c0 d0 23 d7 cd cb a0 17 93 3d 0c 84 76 [ 60.810400] sd 0:0:1:0: [sg0] tag#463 CDB[10]: 3f 18 54 26 3d 85 8a 2e 8c 56 90 7e b1 80 c1 34 [ 60.810410] sd 0:0:1:0: [sg0] tag#463 CDB[20]: 43 [ 60.812715] sd 0:0:1:0: [sg0] tag#463 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 60.812729] sd 0:0:1:0: [sg0] tag#463 CDB: Variable length, sa=0xcba0 00:52:58 executing program 2: pipe2(&(0x7f00008df000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r1, 0x407, 0x0) vmsplice(r1, &(0x7f0000000400)=[{&(0x7f0000000000)='J', 0x1}], 0x1, 0x0) write(r1, &(0x7f0000000040)="ae", 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) readv(r0, &(0x7f0000c9e000)=[{&(0x7f0000c25f19)=""/231, 0xe7}], 0x1) fchmod(r0, 0x8a) 00:52:58 executing program 4: mprotect(&(0x7f00006bf000/0x200000)=nil, 0x200000, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x3e49ac92b2e28599, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) write$P9_RXATTRCREATE(r0, &(0x7f00000001c0)={0x7, 0x21, 0x1}, 0x7) getsockopt$inet6_buf(r0, 0x29, 0xcc, &(0x7f0000000100)=""/23, &(0x7f0000000180)=0x17) futex(&(0x7f0000000240)=0x2, 0x8, 0x0, &(0x7f00000002c0), &(0x7f0000000280)=0x101, 0x800000000000003) fcntl$dupfd(r0, 0x0, r0) 00:52:58 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x10001, 0x1100082) rt_sigsuspend(&(0x7f00000000c0), 0x8) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/load\x00', 0x2, 0x0) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, &(0x7f00000002c0)) keyctl$invalidate(0x15, 0x0) r1 = memfd_create(&(0x7f0000000080)="74086e750000000000000000008c00", 0x0) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40041271, &(0x7f0000000300)) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x19f) getpgid(0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x1081806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000240), 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)={@multicast1=0xe0000001, @multicast1=0xe0000001, 0x0, 0x2, [@broadcast=0xffffffff, @loopback=0x7f000001]}, 0x18) 00:52:58 executing program 7: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') r2 = memfd_create(&(0x7f00000000c0)='fd\x00', 0x0) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000), &(0x7f0000000100)=0x4) write(r2, &(0x7f0000000300)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f00000002c0)=""/2) readlinkat(r1, &(0x7f0000000040)='./file0\x00', &(0x7f00000025c0)=""/57, 0x39) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES16=r3, @ANYBLOB="000526bd7000fbdbdf25010000000800020002000000080001004e230000"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4) 00:52:58 executing program 6: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x400000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f00000001c0)=0x14) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000200)={@mcast1={0xff, 0x1, [], 0x1}, r1}, 0x14) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) eventfd2(0x56, 0x80000) ioctl$ASHMEM_GET_PROT_MASK(r2, 0x40087707, &(0x7f0000000040)) 00:52:58 executing program 1: socket$inet6(0xa, 0x1, 0x0) [ 60.812741] sd 0:0:1:0: [sg0] tag#463 CDB[00]: 7f 00 02 c0 d0 23 d7 cd cb a0 17 93 3d 0c 84 76 [ 60.812752] sd 0:0:1:0: [sg0] tag#463 CDB[10]: 3f 18 54 26 3d 85 8a 2e 8c 56 90 7e b1 80 c1 34 [ 60.812761] sd 0:0:1:0: [sg0] tag#463 CDB[20]: 43 [ 60.832961] capability: warning: `syz-executor6' uses 32-bit capabilities (legacy support in use) 00:52:58 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) unlink(&(0x7f00000000c0)='./file0\x00') 00:52:58 executing program 4: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x9, 0x400) getegid() mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000, 0x80010, r0, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000), &(0x7f0000001ac0)=0x4) 00:52:58 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in={{0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x0, 0x0, 0x0, "7189c6ea81e6d75e07ea6980a840c6aab0b3fa0ca0728f0e779e41c35427961e53eee56e7e8d4061344abe9ac15a5048823a106f43e3c9b1772d981150067834106d4f4651a70638764aad85c3525f4b"}, 0xd8) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) write$P9_RXATTRWALK(r1, &(0x7f0000000040)={0xf, 0x1f, 0x2, 0x7}, 0xf) 00:52:58 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000200)={0x15, 0xcd, &(0x7f0000000100)="3a4789261cd22a41a2cf12e1a86f5c7a7e1081ac67819786b3972f2a6b6318dde94d6cbc2f0c136de40fd00e252b17e6cb7cc2397a30406b6101525fb8f47064055b2fe136660b49f58f99fda30c47f8dc06abfdd9f3bfb9298ad3e40198d077f34f5889d30feeb068743ff61c22725e1ec7e9c878a21a29febce27f1b721146c2743ac08cf38308c76b67fed7552e2eee69708d9255622f0ae249616409779db2b4400a9659d372bcfff6d568fc9e6bbaa8ced7b7fdafd7c56f9c8272706853e3cc263caf8ea756333f99f205"}) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0xd, 0x1000000000a, 0xffffffffffffffff, 0x0, 0x0, {0xa}, [@typed={0x8, 0x1, @ipv4=@broadcast=0xffffffff}]}, 0x1c}, 0x1}, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x8000, 0x102) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000fec000/0x14000)=nil, 0x14000}}) 00:52:58 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"00ac720000000000ec973f820f7c4000", 0x102}) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000000)=0x101) close(r0) 00:52:58 executing program 5: r0 = socket$inet6(0xa, 0x100800000000002, 0x88) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0) sendfile(r0, r1, &(0x7f0000000140), 0xbae4) 00:52:59 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x2, 0x4040000004005) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000000)) 00:52:59 executing program 7: r0 = gettid() prctl$getreaper(0x0, &(0x7f0000000000)) capget(&(0x7f0000000100)={0x2007102a, r0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1000, 0x4000}) r1 = add_key(&(0x7f0000000040)='encrypted\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000140)="42cf1632863ba50f891a6bf0cdf604c64d877258661aec2493254950bac1e7ed4ba8c2794399a9d6d686a1d94fed3df2a261bc91c545d185b7ef608bec719b31ec0ea8519e12c1871acad0930b1ebc47c56a16855ff5287aeab501169be6804e4923d0988e773691054c75271166e491c867973350f113bbbda9982782e6e13c3d0fee9d9669c30b85eb3f6b40ac3cee71e444b2e2900daa7ca691f59d1e459915cc7542c0925717b920e4bd383fb9ed4fa002c9c3ca503ab47a0b2b29120b17ff74b9e229872c8f83e1ca09ac27467e56678d24752034c3a372a912c1a146019455f42925", 0xe5, 0xfffffffffffffff8) r2 = add_key(&(0x7f0000000240)='blacklist\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$link(0x8, r1, r2) 00:52:59 executing program 6: r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2000002) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}, {{0x2}}], 0xdf) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000100)={{{@in=@rand_addr, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@multicast2}}, &(0x7f0000000040)=0xe8) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x6, &(0x7f00000003c0)=[0x0, 0xee01, 0xffffffffffffffff, 0xee01, 0x0, 0x0]) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000400)=0x0) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000500), &(0x7f0000000540)=0x0, &(0x7f0000000580)) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f00000005c0)=0x0) r10 = getuid() lstat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000006c0)=0x0) r13 = geteuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000700)={0x0, 0x0, 0x0}, &(0x7f0000000740)=0xc) fcntl$getownex(r0, 0x10, &(0x7f0000000780)={0x0, 0x0}) fstat(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r1, &(0x7f0000000a00)={&(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc, 0x1000200}, 0xc, &(0x7f0000000080)=[{&(0x7f0000000200)={0xc0, 0x33, 0x0, 0x70bd2d, 0x25dfdbfc, "", [@typed={0x8, 0x74, @uid=r2}, @nested={0x90, 0x75, [@generic="2df39987633bf2cb97baa930204c9e6f0a6b80473d1c6cb5b2744e878c47f4d120bb525cd2e0238353741a2114feab7432ce4392a7f3e6f0609bb797713e706ff897ad2d947cb92df7e1e43300c8eddffb0e8d116544a78ca54b76c316609a0936e0810b0554233cd5e5f64f816eb21ca00408793c0ca81db30b7092372574c01380feb4f1a0399406f2eb"]}, @typed={0xc, 0x1d, @u64=0xa82d}, @typed={0xc, 0x8, @u64=0x3f}]}, 0xc0}], 0x1, &(0x7f0000000900)=[@rights={0x1c, 0x1, 0x1, [r0, r0, r0, r0]}, @rights={0x18, 0x1, 0x1, [r0, r0, r0]}, @cred={0x18, 0x1, 0x2, r3, r4, r5}, @rights={0x1c, 0x1, 0x1, [r0, r0, r0, r0]}, @cred={0x18, 0x1, 0x2, r6, r7, r8}, @cred={0x18, 0x1, 0x2, r9, r10, r11}, @cred={0x18, 0x1, 0x2, r12, r13, r14}, @cred={0x18, 0x1, 0x2, r15, r16, r17}], 0xc8, 0x40000}, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f00000000c0)=0x1) 00:52:59 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x3}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100)=0x120, 0x36b) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[], 0x0) setsockopt$inet6_int(r1, 0x29, 0x8, &(0x7f0000000140)=0x1000000a, 0x4) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, &(0x7f0000000c40), 0x0, &(0x7f0000000d00)=""/91, 0x5b}}], 0x1, 0x2000, &(0x7f0000000e40)) 00:52:59 executing program 2: ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000000)) getpgrp(0xffffffffffffffff) getpid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)) fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000080)={0x0, 0x0}) r1 = getpgrp(r0) getpriority(0xfffffffffffffffd, r1) 00:52:59 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) fcntl$setstatus(r1, 0x4, 0x6100) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000380)={'nat\x00', 0x0, 0x0, 0xcc, [], 0x3, &(0x7f0000000080)=[{}, {}, {}], &(0x7f0000000280)=""/204}, &(0x7f00000001c0)=0x50) ftruncate(r1, 0x81fe) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000240)=ANY=[], 0x0, 0x0, &(0x7f0000002000)}) r3 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./bus\x00', 0x2000000) inotify_rm_watch(r2, r3) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0xfffffeb3) [ 61.941791] blk_update_request: I/O error, dev loop7, sector 0 00:52:59 executing program 0: mknod(&(0x7f0000000ffa)='./bus\x00', 0x1000, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x408000, 0x0) getpeername$unix(r0, &(0x7f0000000180), &(0x7f0000000200)=0x6e) r1 = open(&(0x7f000054a000)='./bus\x00', 0xb00, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) open(&(0x7f0000000100)='./bus\x00', 0x41, 0x0) lstat(&(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl(0x7fffffff, &(0x7f0000000240)='./bus\x00', r2, &(0x7f0000000340)="05d66c57946f0403889cdfc124a41e0de1153c751e5d204b126b3d90ea2a2d1ee9c7ea096f95c7b8ae0c4153385549ea159dffd0bbb6d41ef5261c6275e34426e31d63f45041201143b6c730f58f0d5bafe9fe0d8a58f1e66603bffa519f6aa6856309e8dbe0daf202a58ee8f103ad1ee0af6c32cb15f1f1e2f8c6c9e49e293cbc3a8630cf623bb5828be85d5d8443701ba7c7a090dcc3f2979251e9b825038ca4c0cfb40ba33df4f90e1c26728bdfd0af95ead5691ccd7d883c4413bcb22b1f0f3cdb3680741a067fadc08b6b7850b569578396f7885249cc25") fremovexattr(r1, &(0x7f00000000c0)=@random={'user.', '\x00'}) 00:52:59 executing program 7: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCCBRK(r0, 0x5428) ioctl$UFFDIO_COPY(r0, 0x8004552d, &(0x7f0000000000)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000000/0x2000)=nil, 0x2000, 0x3}) 00:52:59 executing program 6: r0 = memfd_create(&(0x7f0000000100)="885d292b00", 0x0) write(r0, &(0x7f0000000080)="a8", 0x1) openat$selinux_create(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/create\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x0) sendfile(r0, r0, &(0x7f0000000040), 0xff8) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000080)='./file0\x00') 00:52:59 executing program 2: pipe(&(0x7f0000e2aff8)={0xffffffffffffffff, 0xffffffffffffffff}) flock(r1, 0x2) flock(r0, 0x1) r2 = gettid() readv(r0, &(0x7f0000616fa0)=[{&(0x7f0000e4bfb4)=""/57, 0x39}], 0x1) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000a44000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000000)=ANY=[@ANYBLOB="0000800002004e207f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000002004e23e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e20ac14141e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x18c) ioctl$int_in(r3, 0x5452, &(0x7f0000008ff8)=0x7) fcntl$setsig(r3, 0xa, 0x12) fcntl$setownex(r3, 0xf, &(0x7f00002cb000)={0x0, r2}) recvmsg(r4, &(0x7f000070bfc8)={&(0x7f00001d6ff8)=@sco, 0x8, &(0x7f00000a4fb0), 0x0, &(0x7f0000b30000)}, 0x0) dup2(r0, r4) tkill(r2, 0x16) 00:52:59 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f00000001c0)="4c0000005e006d60583bfd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='oom_score_adj\x00') ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) 00:52:59 executing program 1: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3, 0x1c) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x400000, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000003c0)=0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0}, &(0x7f0000000440)=0xc) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = getpgrp(0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000540)={0x0, 0x0}, &(0x7f0000000580)=0xc) fstat(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r1, &(0x7f0000000680)={&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000380)=[{&(0x7f00000000c0)="7e1579e4bac16229612938d34c170d279aeba9fcb000f5", 0x17}, {&(0x7f0000000140)="a02af2505301d32828222e5f8a8df051c97e9dbd19b5687d88706d0e6b0af5df12b2fc00e86543a9e6724e71a37fc4aa6e88110b55a13c62bce956514b9c1264aae12f42a653d988acea28337cb2f6b63ce815c9b3869895d9", 0x59}, {&(0x7f00000001c0)="d90fd7fa719e84a92762e1e9a0a5294815c1ae618a3e3ce504c57ce0bf3e7b5424cf849f26a4b7289ea1c543e03b255d6f406e5d1498c9e4fc1b08c0ed", 0x3d}, {&(0x7f0000000200)="6d251407f1c5882eb00dbb69a47331781f75109f836983a13be44d", 0x1b}, {&(0x7f0000000240)="ef0017ddf7a4cf7e0fdc9b18426ec5d712ccacc754f5f527d954a3f53f286478be3b926ebd30d9cddab128c52b91e7284b01ec758d4031e34f12c5fc3573e9db0220a46cb55c9970b0f938da8e367027003a05ebdd5e18b6dbae6d45e238b7522c36a7b92f9bafd35ff629ac2a87e47a3261c5b4d7b62a211e4a88de21798468e32a4b3f633ea2bac9a596a5", 0x8c}, {&(0x7f0000000300)="58bfd91c2daf803d1da211d3ae7f5a118e56e8005fb0127d379679f051a74081f30bdee66294fd1362d67fa99d68242fc37b643261d5083195e03f4e4021286c7d10678f4acfd0bc9242749639b0d624e31f3e962e110f2f0f7a602a6564546dfd1f4bfb0c0cfdaddc5bc2617e", 0x6d}], 0x6, &(0x7f0000000640)=[@cred={0x18, 0x1, 0x2, r2, r4, r5}, @cred={0x18, 0x1, 0x2, r6, r7, r8}], 0x30, 0x4004010}, 0x40) syz_open_procfs(r3, &(0x7f00000006c0)='clear_refs\x00') 00:52:59 executing program 3: sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c000000000000000000000002000900400000000000bc0000000000030006000000000002000000e0000054d81418186fd3b90002000100000000000000030cfff70000030005000000000002000000e00000010000000100000000"], 0x60}, 0x1}, 0x0) 00:52:59 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x21, &(0x7f0000000040), 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) getresuid(&(0x7f0000000080), &(0x7f00000000c0)=0x0, &(0x7f0000000100)) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r1, &(0x7f0000000040)='./file0\x00', r2, r3, 0x100) 00:52:59 executing program 3: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x100) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000880)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x3, &(0x7f0000000980)) sync() getresgid(&(0x7f0000000040)=0x0, &(0x7f0000000080), &(0x7f00000000c0)) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffff9c, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000340)='./file1\x00', r2, r4) getgroups(0x312, &(0x7f0000000340)) getresgid(&(0x7f0000000380)=0x0, &(0x7f00000003c0), &(0x7f0000000400)) r6 = openat(0xffffffffffffffff, &(0x7f00000005c0)='./file1\x00', 0x40080, 0x4) ioctl$VT_DISALLOCATE(r6, 0x5608) r7 = getegid() lstat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x2, &(0x7f0000000500)=[0xee00, 0xee00]) prctl$setendian(0x14, 0x1) setgroups(0x9, &(0x7f0000000540)=[r0, r1, r3, r4, 0x0, r5, r7, r8, r9]) getgroups(0x5, &(0x7f0000000580)=[r3, r4, r0, r3, r4]) 00:52:59 executing program 5: r0 = socket$inet6(0xa, 0x1, 0xfffffffffeffffff) sendmmsg(r0, &(0x7f0000000180)=[{{&(0x7f0000000000)=@in6={0xa, 0x1, 0x0, @loopback={0x0, 0x1}}, 0x80, &(0x7f0000000040), 0x0, &(0x7f0000000080)}}, {{&(0x7f0000000a80)=@in={0x2, 0x0, @rand_addr}, 0xc, &(0x7f0000000080), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="10100e000000ce830000d7a1b3a5565b62d6f14645ca00000000"], 0x10}}], 0x2, 0x0) 00:52:59 executing program 4: openat$keychord(0xffffffffffffff9c, &(0x7f0000000080)='/dev/keychord\x00', 0x30502, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c) recvfrom$inet6(r0, &(0x7f0000000000)=""/102, 0x17e6c86c37f861f7, 0x0, 0x0, 0x1c622914) socket$inet6(0xa, 0xe, 0x9) connect$inet6(r0, &(0x7f000000cfe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x4, 0x31, 0xffffffffffffffff, 0x0) write$binfmt_script(r0, &(0x7f0000000a40)=ANY=[@ANYBLOB='\t'], 0x1) 00:52:59 executing program 7: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') sendto$unix(r0, &(0x7f0000000040)='\f', 0x1, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(r2, 0x0) 00:52:59 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x80000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12634840040000000000000001000000000000000000000010000000000000000000000038000000000000001000000000000000", @ANYPTR64=&(0x7f0000000380)=ANY=[@ANYBLOB="8561646600000000090000000000000001000000000000000f00000000000000852a646600000000", @ANYRES32=r0, @ANYBLOB="0027c4f800000400000000000000"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB='8\x00\x00\x00\x00\x00\x00\x008\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="fbec000000000000"], 0x85, 0x0, &(0x7f0000000280)="67c987c0d71f098a75e00b928d5e5ecf21f8ff9cbe64641104689af1ef139bf498b67d65cd8058044278eb1fef8dafd11dfc1c8ed1843e51c322e311263047ca0516b948ef0e0283f1db85b07207ca93f1751d72e40c81de93ce25073efe24d2f6b0f2c5df50d361a8438dccb9ea4a90932322c9c4629a3618fd1cdc08192d29952db06ff6"}) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000140)) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000000e80)=[{&(0x7f0000005a80)="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", 0x579}], 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB="0000000000fc04b0d9e06ed3b34548f8e3c281f3f24a0d819b180d5c1886e2bb33df651a33398a0327dba810b81cfc41136c3ca9abaf064f510fa27d5830c8cf8377610179e3bd0295f2ab8319deaf756577423cc6fed35be5b77f0b000000000000000000"], 0x0, 0x0, &(0x7f0000002000)}) 00:52:59 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x2ae9c4d7) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000200)=0x14) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000240)={@ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, r1}, 0x14) fstat(r0, &(0x7f0000000080)) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x800, 0x0) ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000000040)) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000340)=""/20, &(0x7f0000000380)=0x14) 00:52:59 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x301000, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4) futex(&(0x7f0000000100)=0x1, 0x800000000006, 0x2, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x2) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000200)={'filter\x00', 0x0, 0x4, 0xb0, [], 0x1, &(0x7f0000000080)=[{}], &(0x7f0000000140)=""/176}, &(0x7f0000000280)=0x50) futex(&(0x7f000000cffc), 0x800000000005, 0x0, &(0x7f00003b6ff0)={0x0, 0x1c9c380}, &(0x7f0000048000), 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) 00:52:59 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xffff, 0x8800) socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=@ipv6_delrule={0x20, 0x21, 0x11, 0x0, 0x0, {0xa}}, 0x20}, 0x1}, 0x0) [ 62.300812] binder: 6249:6250 got reply transaction with no transaction stack [ 62.332021] binder: 6249:6250 transaction failed 29201/-71, size 56-16 line 2926 [ 62.359066] binder: 6249:6250 ioctl c0306201 20007000 returned -14 [ 62.391421] binder: 6249:6265 ioctl c0306201 20000340 returned -14 [ 62.407472] binder_alloc: binder_alloc_mmap_handler: 6249 20000000-20002000 already mapped failed -16 [ 62.423604] binder: BINDER_SET_CONTEXT_MGR already set [ 62.429428] binder: 6249:6250 ioctl 40046207 0 returned -16 00:53:00 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req={0xd2, 0x7f, 0xfff, 0x3ff}, 0x10) 00:53:00 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x20000000000000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x400445a0, &(0x7f0000013000)) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000013000/0x2000)=nil, 0x2000}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000013000/0x1000)=nil, 0x1000}) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/checkreqprot\x00', 0x80000, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000021}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0xc8, r3, 0x800, 0x70bd2c, 0x25dfdbfc, {0x7}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote={0xfe, 0x80, [], 0xbb}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x302}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x247}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local={0xac, 0x14, 0x14, 0xaa}}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote={0xfe, 0x80, [], 0xbb}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x400}]}, 0xc8}, 0x1, 0x0, 0x0, 0x40810}, 0x20000000) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000040), 0x4) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) ptrace$getenv(0x4201, r4, 0x4, &(0x7f0000000100)) 00:53:00 executing program 7: r0 = socket(0x10, 0x10000000000002, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') getsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendfile(r0, r1, &(0x7f0000000000), 0x80000002) 00:53:00 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$int_in(r0, 0x5473, &(0x7f0000000000)=0x2) r1 = syz_open_dev$binder(&(0x7f000067cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00003cb000)={0x34, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff193c1a0e8549ec1c854bfc8e1024b1e503e42ca05c59adde6b6154c84b720bfac09d6adb"], 0x0, 0x0, &(0x7f00002f6000)}) 00:53:00 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'nr0\x00', 0x2}) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x220031, 0xffffffffffffffff, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000180)) 00:53:00 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x4, 0x1}}, 0x2e) mmap(&(0x7f000083b000/0x2000)=nil, 0x2000, 0x2, 0x32, r0, 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x40047459, &(0x7f0000000180)) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000000)) 00:53:00 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_mcast\x00') poll(&(0x7f0000000040)=[{r0, 0x40}, {r0, 0x84}, {r0, 0x81c9}, {r0, 0x55}, {r0, 0x4002}, {r0, 0x200}, {r0, 0x100}], 0x7, 0x6) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000080)={'ipvs\x00'}, &(0x7f0000000200)=0xfffffffffffffd8b) sendfile(r0, r0, &(0x7f0000000100)=0xfffff, 0x800) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000140), &(0x7f00000001c0)=0x60) 00:53:00 executing program 4: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001640)="24000000100007031dfffd946fa2830020200a0009000300001c85680c1ba3a20400ff7e28000000030affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) write$sndseq(r1, &(0x7f0000000100)=[{0xfff, 0x800, 0x9, 0x9, @tick=0x10000, {0x8001, 0x20}, {0x8, 0x7f}, @control={0x3, 0x8, 0x80000001}}, {0x100000, 0x10000, 0x1, 0x5, @time={0x0, 0x989680}, {0x1, 0x3e}, {0x1, 0x1}, @note={0x7, 0x100000000, 0x4b3, 0xc036, 0x8}}, {0x9, 0x1, 0x10000000000, 0x9, @tick=0x4, {0xffffffffffff0000, 0x101}, {0x7ff, 0x6}, @quote={{0x7, 0x672e}, 0x5, &(0x7f00000000c0)={0x40, 0x3800000, 0x401, 0x10000, @time={0x0, 0x989680}, {0x101, 0x401}, {0x5, 0x3}, @note={0x7, 0x7, 0x9, 0x6, 0x401}}}}], 0x54) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f0000000180)=0x1) 00:53:00 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000a00)='./file0\x00', 0x14104a, 0x20) timerfd_create(0x6, 0x80000) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000080)=0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000140)=0x0) sendmsg$nl_netfilter(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20804004}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="0800660006fd55bd9f9999e722a6935406dedfa1db9bb6f5703e63810ed485a881b24b28fa1a4ee48261a44983d6fef1c32777127ebf4577d30fbf155c446badcad64240bc0b529df500b13dcc001681323d4578003b00deb5cb542437e778b9630284834e03618d6504379aca058aa02068c3f9872dde58d0d3e9066d3746993cd8a42f62c357e7d4e0e0bf86d0e9ebd055281539e00f908e9198b96fa6b106890a22a94ed73641b355f303cc55721d11913ab12aab559998370a536b483255ff2d6d6a47d52a33c715340400660008004300", @ANYRES32=r3, @ANYBLOB="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"], 0x7a4}, 0x1, 0x0, 0x0, 0x4}, 0x40001) write$evdev(r1, &(0x7f0000037fe8)=[{}], 0x18) sendfile(r1, r1, &(0x7f00009bcffe), 0x2000000800004c39) sendfile(0xffffffffffffffff, r1, &(0x7f0000000200), 0x80003ffd) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000000)=0x4, 0x4) creat(&(0x7f0000000ac0)='./file0\x00', 0x0) 00:53:00 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) writev(r0, &(0x7f0000000440)=[{&(0x7f0000001640)="c3", 0x1}], 0x1) sendmmsg(r0, &(0x7f000000aa40)=[{{&(0x7f0000000180)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000001600)="c9", 0x1}], 0x1, &(0x7f0000002600)}}], 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0xc4, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) 00:53:00 executing program 0: r0 = timerfd_create(0x2, 0x0) fremovexattr(r0, &(0x7f0000000000)=@random={'system.', '\x00'}) socketpair$inet6_udplite(0xa, 0x2, 0x88, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f00000001c0)={'veth0_to_bond\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000200)={@ipv4={[], [0xff, 0xff], @rand_addr=0x64}, r2}, 0x14) timerfd_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, &(0x7f0000000080)) [ 63.250620] binder: 6284:6294 ioctl 5473 20000000 returned -22 [ 63.260671] binder: 6284:6294 ioctl c0306201 203cb000 returned -14 [ 63.273638] netlink: 20 bytes leftover after parsing attributes in process `syz-executor4'. 00:53:00 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'team_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001800010300000000000000000200000000000005000000000c00090008000000", @ANYRES32=r1, @ANYBLOB="0800040a", @ANYRES32=r1], 0x30}, 0x1}, 0x0) 00:53:00 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x100, 0x5) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0xffffffffffffff00, 0x1, 0x2, 0x1, 0x43f}, 0xc) r1 = socket(0x200000000010, 0x2, 0x0) ioctl$TCFLSH(r0, 0x540b, 0xfc9) write(r1, &(0x7f000095c000)="24000000260077000000000000007701000000ff0100000000000000ffffffff0100ff10", 0x24) ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, &(0x7f00000000c0)) ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, &(0x7f0000000080)) 00:53:00 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"00ac730000000000ec973f820f7c4000", 0x102}) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'gre0\x00', 0x200}) 00:53:00 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000000000), &(0x7f0000000340)=0x4) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@dev}}, &(0x7f0000000280)=0xe8) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x802000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@gettclass={0x24, 0x2a, 0x100, 0x70bd2c, 0x25dfdbff, {0x0, r2, {0xfff3, 0xffe6}, {0xffff}, {0xffff}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000880}, 0x11) 00:53:00 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$int_in(r0, 0x5473, &(0x7f0000000000)=0x2) r1 = syz_open_dev$binder(&(0x7f000067cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00003cb000)={0x34, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff193c1a0e8549ec1c854bfc8e1024b1e503e42ca05c59adde6b6154c84b720bfac09d6adb"], 0x0, 0x0, &(0x7f00002f6000)}) [ 63.317882] binder: 6284:6294 ioctl 5473 20000000 returned -22 [ 63.324434] binder: 6284:6294 ioctl c0306201 203cb000 returned -14 [ 63.342858] netlink: 20 bytes leftover after parsing attributes in process `syz-executor4'. 00:53:00 executing program 4: mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x4, 0x10000000000032, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000000)={{0x2, 0x4e24}, {0x307, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x40, {0x2, 0x4e21}, 'ip6_vti0\x00'}) pipe(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_type(r1, &(0x7f00000000c0)='cgroup.type\x00', 0x2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000001000)={'filter\x00'}, &(0x7f0000000140)=0x24) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000180)=0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@local}}, &(0x7f00000002c0)=0xe8) r6 = syz_open_dev$sndtimer(&(0x7f0000920000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r6, 0x80045400, &(0x7f00000000c0)) sendmsg$netlink(r2, &(0x7f0000000700)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc, &(0x7f00000006c0)=[{&(0x7f0000001040)={0x13d4, 0x21, 0x8, 0x70bd27, 0x25dfdbff, "", [@typed={0x8, 0x8, @fd=r3}, @typed={0x14, 0xe, @ipv6=@mcast1={0xff, 0x1, [], 0x1}}, @typed={0x10, 0x19, @str='ip6_vti0\x00'}, @nested={0xc, 0x55, [@typed={0x8, 0x77, @u32=0x2b}]}, @typed={0x8, 0x32, @fd=r3}, @nested={0xb0, 0x48, [@generic="3da61a329b1b99ffcaa854b1f8dbc7090c3570ea6a8dea99647634e9908874372d49d8a0f70d1bfe610b8edd7544f89521b61f5f17f8db8ecc85f5452f97ff8a10191e6ebb2f31caa6aecf293c1ee5db2ab6886503d0f4fac586ce3f2994578ad0c1079c7660f44b73521dafa3960f2e963c683edbbd7b334fb15ec0955d962943f3c7780643f78682dcce1cd7c2bb38e456ca9b2273f83186d48ca48633231d5d8bdccff156f6f1cfc2"]}, @nested={0x1284, 0x91, [@typed={0x8, 0x68, @fd=r1}, @typed={0x90, 0x2, @binary="8373797d008f4695889a44a3e7691053fdc1dc068cb50fa1e5db67b8612bded958528332a724ae1f8067cb27d9292bc6759194c90a705839089a8801b3e0045df6b1c9ffa5d264b7465ff2e47cb5df7784235833784d3095bc57d9f209b5da43394a5d333cedf086d160e3ffc437a616b93232aa7173f2607fdcb1aafad3b292e96797b8083e651de47eb33a"}, @typed={0x8, 0x43, @fd=r1}, @typed={0xc, 0x1a, @str='filter\x00'}, @generic="aa1d8d659196769cd1068980eeaf887e73ceebaee350c457b74626213a22b8722e82d3f3295fa89c6c2edb948d2bb03bd76470c347cf10bffb060dfc279f3751eac9523ac5d98dd7e0b067de2b64e1aa08056c44efd621b6f1aa039be036e20733d385d69c8aa93dd99c7dc23fb025a06f923d4bfcbd96f2af6a0d1cc3675c0fd9", @typed={0x18, 0x6, @str='[wlan0wlan1vboxnet1\x00'}, @generic="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", @generic="523dc7b3f68866205d9634317fd0741a63f0289c2b74fd713e392beca5171d319ecc3708e949784cdec1b62b3a554b35bdad43774742cb1a9fe1047320722c91259985e36946bc5f9e4eb470306a80a5b4930daee0329a81be61406eb6e22e648bcf1e344ae89e7845710746e2ab6dfff86e2279215813d2be99ac3fd252ffd1d8ef4085ac4521fda71a289766f39f31b111c9496e299679cdc04e4d6f995d14954b73976fcdaf99ed19e25df613f0456f", @typed={0x88, 0x62, @binary="6e56cede1ff6adc2becd04073370526d76d4f8b0868b1058affac27c0813f1d3435008ef84b574d529c973e2aed6653e50ed7f8e09720cb88c440f66c08186da3391a97b9836ea0052033e7a06aa0745a9b3da597e700a87d95d5daecf67d5d1b2f73eea60a9bc2576f18cb297fd2a5de5d570f58323ae53d7b848be4dfd787f68c9c2"}]}, @generic="0c241d947a387c5f16a028fd980daa23713858937275d6e49ada85cb0c245243b91c5c586f292c88b66848582a007769b2d9a37cc86e5e94da7f92d550e513ffc90c5f3a2a4728e9eb75e0773423da"]}, 0x13d4}, {&(0x7f0000000300)={0x3c0, 0x3f, 0x4, 0x70bd28, 0x25dfdbfc, "", [@typed={0x8, 0x7d, @u32=0x8}, @generic="b3e1a6bc4947ab8b8e88988b63270c322104b1aa4c77330586e108010180a18015be159b7e1cde5b8833a2883e8ced4c93da977e488ab5615ae8c672548620f199c3d7738cc174c034305eb0ba8f33e32886722b33272a641921f60e6a0cd0e7dabf8e3b7bdae144a356b36f6c4ad3ed4becf0527afb3e19522463f03cd74c40b5f38fd743cd5c37f04a28a5b4174121163ce1a895b2", @nested={0x110, 0x7a, [@typed={0x8, 0x70, @fd=r3}, @typed={0x8, 0x79, @u32}, @generic="e16766b3a30e60755b9f43a1bac3ecf5154d1f4a06b9e72186a3c1434054a10644e70aee5f9553a4c54973e8cf4362dba21d0b3750131ae119989a9e02313b29192c5e3b699eaf3c3313d0bfcb1a4bdb7e95d77a2e", @typed={0x14, 0x3d, @ipv6=@local={0xfe, 0x80, [], 0xaa}}, @typed={0x10, 0x2f, @str='ip6_vti0\x00'}, @generic="89222999e7951f46702765c88b08f1020062d78bfc86a9a870e2f1e0f98310f4d6df55b27c33e2df33c92a69b0eff0adcebc3429e502c1487c20edf1f42f6c4c92497be1e1c897614a9f942bd5a3c1ab69a442b09adcdcd0a26427a3c5b2fb00fbc92e8dc5cbcebe659c8fcf116c9db0ccaf7fe7a9ea9cae73cba8e7b618b02336de58"]}, @nested={0x200, 0x1f, [@typed={0x14, 0x8f, @ipv6}, @generic="47d482eddf91c499787e55f97e4d9679730bab4212c69fb2cf7c81add5afe661d5ceda82a4feaa175c2e604ee9baab4162b5d7b186b7e6bc1b203e335c51b6fa5ba06456a1e3c784c1c8afb39dc5aa6248e3ba3a1270560c0470be17b3a3213efd944bc74b32a7181a2d830c56c87a05f066f7e3056805d9fa5b7926d7c4786e572276eefdfb4ba399cc0fab4807b3551dffd37668be1c82493014889b7c11d6f53f77883832e3415b070673f2c99721f77a10744e93ca1d61f686adfcc9bb73865dd76434a83130fd2eb6734eeaeedd05209bc272504f4e7f5e8ea632f15e049046", @typed={0x8, 0x6a, @pid=r4}, @typed={0x8, 0x5a, @uid=r5}, @typed={0x14, 0x6, @ipv6}, @typed={0x14, 0x7d, @ipv6=@ipv4={[], [0xff, 0xff]}}, @typed={0xc, 0x14, @u64=0x8}, @generic="1279bf37d5dfd9225c48ab1d9f8440115a48c676c8a7ffcab082cbbc5586d5e437244ff73f806d4f3df908595c7610f425f661d9f6e475df04d832d13a913d6bbef3cc7f3f97bd68cb0915ef3cb919f3dc7511c076c7a9aa813ba34d3964e952d600237c07d2cea1f97d684ee3ec3b5b4de3ee9d7a3f7ada93a0beb970d6dda08dfbe314dd9bbb9a1efd9997782db2b2813df7d46291477c785fd8c70b342eb7a7d6275640cae861161472a1c702cc82613ec26f", @typed={0xc, 0x7a, @u64=0xffffffffffffffff}]}]}, 0x3c0}], 0x2, 0x0, 0x0, 0x2404c040}, 0x4048080) [ 63.425398] binder: 6330:6333 ioctl 5473 20000000 returned -22 [ 63.444897] binder: 6330:6333 ioctl c0306201 203cb000 returned -14 [ 64.035492] FAULT_FLAG_ALLOW_RETRY missing 30 [ 64.040148] CPU: 0 PID: 6285 Comm: syz-executor5 Not tainted 4.9.111-g03c70fe #10 [ 64.047763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 64.057115] ffff8801a3bf7770 ffffffff81eb2729 0000000000000002 0000000000000000 [ 64.065148] ffff8801cd7b0000 ffff8801a3bf7940 0000000000000000 ffff8801a3bf7968 [ 64.073178] ffffffff81cb907b 0000000000006e08 ffff8801a3a75130 ffff8801cd7b010c [ 64.081189] Call Trace: [ 64.083769] [] dump_stack+0xc1/0x128 [ 64.089121] [] handle_userfault.cold.18+0x3e/0x51 [ 64.095611] [] ? debug_check_no_locks_freed+0x210/0x210 [ 64.102615] [] ? userfaultfd_ioctl+0x2540/0x2540 [ 64.109135] [] ? __schedule+0x655/0x1bd0 [ 64.114830] [] ? handle_mm_fault+0x1267/0x28e0 [ 64.121049] [] ? handle_mm_fault+0x220f/0x28e0 [ 64.127422] [] handle_mm_fault+0x221d/0x28e0 [ 64.133487] [] ? vm_insert_mixed+0x200/0x200 [ 64.139551] [] ? __lock_is_held+0xa2/0xf0 [ 64.145337] [] __do_page_fault+0x5af/0xd50 [ 64.151215] [] ? mm_fault_error+0x2c0/0x2c0 [ 64.157182] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 64.163840] [] do_page_fault+0x27/0x30 [ 64.169360] [] page_fault+0x28/0x30 [ 64.174847] [] ? copy_user_generic_unrolled+0x9e/0xc0 [ 64.181669] [] ? evdev_ioctl_handler+0xb18/0x1820 [ 64.188174] [] ? __might_sleep+0x95/0x1a0 [ 64.194130] [] ? str_to_user+0xa0/0xa0 [ 64.199662] [] ? selinux_file_ioctl+0x10a/0x550 [ 64.205971] [] ? selinux_capable+0x40/0x40 [ 64.211834] [] ? __fget+0x20a/0x3b0 [ 64.217176] [] ? __fget+0x231/0x3b0 [ 64.222429] [] ? __fget+0x47/0x3b0 [ 64.227614] [] evdev_ioctl_compat+0x29/0x30 [ 64.233572] [] compat_SyS_ioctl+0x126/0x1fe0 [ 64.239635] [] ? evdev_ioctl_handler+0x1820/0x1820 [ 64.246286] [] ? do_ioctl+0x60/0x60 [ 64.251554] [] do_fast_syscall_32+0x2f7/0x870 [ 64.257695] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 64.264347] [] entry_SYSENTER_compat+0x90/0xa2 00:53:01 executing program 5: socket$inet(0x2, 0x2, 0x0) r0 = memfd_create(&(0x7f0000000000)='em0vmnet0eth1nodev\x00', 0x2) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000040)={0x1, 0x8, 0x22, 0x9, 0x3, 0x100008001}) 00:53:01 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet6_opts(r1, 0x29, 0x3f, &(0x7f0000000040)=""/158, &(0x7f0000000100)=0x9e) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x8100000) 00:53:01 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0x104) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000280)={0x6, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}, 0x84) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x4, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}}}}, 0xfffffd17) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, &(0x7f0000000340)={0x537, 0x1, 0x2, 0x8}) 00:53:01 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0xfffffc5e) fcntl$dupfd(r0, 0x0, r0) 00:53:01 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000001e, &(0x7f0000000100)=0x1, 0x4) getsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000000040)={@remote, @broadcast, @multicast2}, &(0x7f0000000080)=0xc) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4040, 0x0) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000140)={0xdab, 0x100000001, 0x6}) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) mq_open(&(0x7f0000000200)='/dev/pktcdvd/control\x00', 0x82, 0x30, &(0x7f0000000240)={0x4, 0x0, 0x3, 0x7, 0xfffffffffffffffd, 0x0, 0xd6, 0x3}) r2 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000180)='/dev/pktcdvd/control\x00', 0x101800, 0x0) inotify_add_watch(r2, &(0x7f00000001c0)='./file0\x00', 0x8) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000000580), 0x0, &(0x7f0000004bc0)}}], 0x1, 0x20004bc0) 00:53:01 executing program 3: r0 = socket$inet6(0xa, 0x40000000004, 0x803) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x4000, 0x0) r3 = openat$selinux_user(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/user\x00', 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='wchan\x00') r5 = syz_fuseblk_mount(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0xc002, 0x0, 0xffffffffffffffff, 0x3f, 0x1ff, 0x2) clock_gettime(0x0, &(0x7f0000002000)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001f80)=[{{&(0x7f0000000240)=@un=@abs, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/216, 0xd8}, {&(0x7f00000003c0)=""/28, 0x1c}, {&(0x7f0000000400)=""/97, 0x61}, {&(0x7f0000000480)=""/184, 0xb8}, {&(0x7f0000000540)=""/109, 0x6d}, {&(0x7f00000005c0)=""/62, 0x3e}, {&(0x7f0000000600)=""/49, 0x31}, {&(0x7f0000000640)=""/78, 0x4e}, {&(0x7f00000006c0)=""/18, 0x12}], 0x9, 0x0, 0x0, 0x2}, 0x8}, {{&(0x7f0000000780)=@ax25, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000800)=""/232, 0xe8}, {&(0x7f0000000900)=""/41, 0x29}, {&(0x7f0000000940)=""/46, 0x2e}, {&(0x7f0000000980)=""/20, 0x14}, {&(0x7f00000009c0)=""/45, 0x2d}, {&(0x7f0000000a00)=""/94, 0x5e}], 0x6, 0x0, 0x0, 0x1}, 0x10001}, {{&(0x7f0000000ac0), 0x80, &(0x7f0000001e80)=[{&(0x7f0000000b40)=""/29, 0x1d}, {&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/219, 0xdb}, {&(0x7f0000001c80)=""/225, 0xe1}, {&(0x7f0000001d80)=""/183, 0xb7}, {&(0x7f0000001e40)=""/3, 0x3}], 0x6, &(0x7f0000001ec0)=""/132, 0x84, 0x7}, 0x100000000}], 0x3, 0x1, &(0x7f0000002040)={r6, r7+30000000}) poll(&(0x7f00000001c0)=[{r0, 0x8080}, {r1, 0x2}, {r2, 0x2008}, {r3, 0x200}, {r4, 0x2000}, {r5, 0x190}], 0x6, 0x2) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='oom_score_adj\x00') r9 = userfaultfd(0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f0000c34000)={0xaa}) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) ftruncate(r2, 0x81) ioctl$EVIOCGKEY(r4, 0x80404518, &(0x7f00000020c0)=""/175) tee(r1, r5, 0x3, 0x1) ioctl$UFFDIO_ZEROPAGE(r9, 0xc020aa04, &(0x7f0000000080)={{&(0x7f00004e7000/0x2000)=nil, 0xdfb17000}}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000002080)='/dev/vga_arbiter\x00', 0x0, 0x0) sendfile(r8, r5, &(0x7f0000000200), 0xffffffffe143b663) 00:53:01 executing program 4: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pktcdvd/control\x00', 0x40000, 0x0) ioctl$BLKPBSZGET(r1, 0x127b, &(0x7f0000000080)) ioctl$SG_IO(r0, 0x5385, &(0x7f00000003c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0xb8, &(0x7f00000001c0)=""/184}, &(0x7f0000000280), &(0x7f0000000340)=""/128, 0x0, 0x0, 0x0, &(0x7f0000000040)}) syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x2, 0x300) 00:53:01 executing program 7: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) close(r1) fcntl$setstatus(r1, 0x4, 0x42000) socket$packet(0x11, 0x2, 0x300) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 00:53:01 executing program 4: r0 = dup(0xffffffffffffffff) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000200}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r1, 0x400, 0x70bd25, 0x25dfdbfc, {0x1}, [@FOU_ATTR_IPPROTO={0x8, 0x3, 0x32}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x62}, @FOU_ATTR_TYPE={0x8, 0x4, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000100)={0x17, 0x0, &(0x7f00000000c0)}) setsockopt$inet6_buf(r2, 0x29, 0xfd, &(0x7f0000000200)="4e6b092c9e9bd60b2cbcfe0cb6c7e99061122c6a5fbbcae3c377fb7d87e078e777cc3006f419ac15bca4082d1283f8f425f5b90c44ff5b298d6b4e1fc9df642273fd4974a8c11c78583c806fd421d29de7", 0x51) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') 00:53:01 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x80002000000005, 0x850, r0, 0x100000000000) clone(0x0, &(0x7f0000000100), &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000e80)) 00:53:01 executing program 1: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000000080)="1f0000000104ff00fd4354c00711000189051200080001000204776274e9e4", 0x1f) pipe(&(0x7f0000000000)) 00:53:01 executing program 0: r0 = memfd_create(&(0x7f0000000140)='#em1#+\x00', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) fstat(r0, &(0x7f0000000080)) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x40000000000cb, &(0x7f0000000000), 0x3) 00:53:01 executing program 6: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x800, 0xd) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080), &(0x7f0000000100)=0x14) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000040)={@rand_addr, @multicast1, 0x0}, &(0x7f0000000180)=0xc) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f00000001c0)={@broadcast=0xffffffff, @multicast1=0xe0000001, r1}, 0xc) utimes(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={{0x77359400}, {0x0, 0x2710}}) 00:53:01 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) signalfd4(r0, &(0x7f0000000000)={0x1}, 0x8, 0x800) ioctl$TCSETSF(r0, 0x4004510f, &(0x7f0000000040)={0x2}) 00:53:01 executing program 6: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d0000100000000000000000000000030006000000000002000000e000000100000000000000000800120002000200000000007d2200001800000003000000000000000000000000000000000000001600000000000001ac1414bb000000000000000000000000030005000000000002000000e00000010000000000000000"], 0x80}, 0x1}, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x40, 0x0) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000040)) 00:53:01 executing program 7: r0 = inotify_init() r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f00000000c0)={0x13, 0x5, 0x3, 0x6, 0x9, 0x7fffffff, 0x2, 0x4b}) inotify_add_watch(r0, &(0x7f0000000200)='./file0\x00', 0x84000482) ioctl$TIOCCONS(r1, 0x541d) unlink(&(0x7f0000000040)='./file0\x00') write$selinux_load(r1, &(0x7f0000000240)={0xf97cff8c, 0x8, 'SE Linux', "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"}, 0x10b) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000400)=0x0) accept4$packet(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000380)=0x14, 0x800) fcntl$lock(r0, 0x7, &(0x7f0000000080)={0x4c31d2006d729025, 0x4, 0x7, 0xfffffffffffffffb, r2}) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)="fd", 0x1}], 0x1) 00:53:01 executing program 0: set_thread_area(&(0x7f0000000000)={0xfff, 0x1000, 0x400, 0x3, 0x800, 0x9, 0xc9, 0x80100000001, 0x7, 0x48}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000040)) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/fib_triestat\x00') write$P9_RMKNOD(r1, &(0x7f0000000100)={0x14, 0x13, 0x1, {0x14, 0x3, 0x8}}, 0x14) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000080)={0x0, 0x100, 0x80}, 0xc) [ 64.500216] netlink: 3 bytes leftover after parsing attributes in process `syz-executor1'. [ 64.537792] netlink: 3 bytes leftover after parsing attributes in process `syz-executor1'. 00:53:01 executing program 5: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)) pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00') r0 = memfd_create(&(0x7f0000000300)='cpuset\x00', 0x2) bind$inet6(r0, &(0x7f0000000340)={0xa, 0x4e22, 0xfffffffffffffffe, @mcast2={0xff, 0x2, [], 0x1}, 0x6}, 0x1c) 00:53:01 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = getgid() ioctl$TUNSETGROUP(r0, 0x400454ce, r1) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="020a000007000000000000000000000005001a000000000000000000000000000000e0ffffff0000000000000000ffffac14140000000000"], 0x38}, 0x1}, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000100)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1}) 00:53:01 executing program 1: r0 = memfd_create(&(0x7f0000000100)='#em1#+\x00', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000080)={'ipvs\x00'}, &(0x7f00000000c0)=0x1e) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000280)) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0xab7, 0x0, 0x6, 0x6, 0x4, "10e8727da8d770b3a6b317a97a1d26c05fc82b574ec2350516daafdc3eaf511c919aa87c729c00f29cec15704d4eb8974416b2779b7d7b33cdcc743e02c0955a", "b9485d2323538f417d7f24645986fe0c385ece4a0b62b4ceb250b623bce9ff34b2960826edbc5b26912df43a35e17588c201ef77fa55eb266f138fb919708c91", "acb328525a1f10a7fcaee706087bb6a80c1fb463a5f017762ef4fe6ab3bfed1d"}) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) futimesat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)) 00:53:01 executing program 7: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) signalfd(r0, &(0x7f00000000c0)={0x5}, 0x8) r1 = socket$inet(0x2, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000080)={@multicast2=0xe0000002, @multicast1=0xe0000001, 0x2}, 0xc) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000200)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) setsockopt$inet_mreqsrc(r1, 0x0, 0x24, &(0x7f0000000040)={@multicast2=0xe0000002, @multicast1=0xe0000001}, 0xc) 00:53:02 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$packet(0x11, 0x10000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) bind$packet(r1, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14) sendmmsg(r1, &(0x7f0000003080)=[{{&(0x7f00000000c0)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14, &(0x7f0000000480), 0x0, &(0x7f0000000500)}}, {{0x0, 0x0, &(0x7f0000002940), 0x0, &(0x7f0000002980)}}], 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='pids.events\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) ioctl$EVIOCSREP(r3, 0x40084503, &(0x7f0000000280)=[0xfff, 0x10000]) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000200)={@loopback=0x7f000001, @multicast2=0xe0000002, @multicast2=0xe0000002}, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f00000001c0)=0xb, 0x4) accept4$packet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000180)=0x14, 0x0) ioctl$IOC_PR_RELEASE(r3, 0x401070ca, &(0x7f0000000240)={0x79faa500, 0x2, 0x1}) 00:53:02 executing program 5: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x2, 0x0) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000140), &(0x7f0000000180)=0x8) read$eventfd(r0, &(0x7f0000000080), 0x8) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rfkill\x00', 0x20c802, 0x0) sync_file_range(r0, 0x4, 0x7, 0x7) r2 = socket(0x8000200000000010, 0x0, 0xfffffffffffffffc) socket(0x9, 0x0, 0x4a) write(r2, &(0x7f0000000000)="240000002a007f010000000000ed765c640000ff01000000000000ffff0100ff10000b00", 0x24) accept4$packet(r0, &(0x7f0000002e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000002e80)=0x14, 0x800) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000002ec0)=r3) write(r1, &(0x7f0000000100)="2298", 0x2) 00:53:02 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x6}]}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000001c000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="000000f4b100060000000000"], 0x24}, 0x1}, 0x0) 00:53:02 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000000a80)=[{{&(0x7f0000000080)=@xdp, 0x80, &(0x7f0000000840)=[{&(0x7f0000000440)=""/140, 0x8c}, {&(0x7f0000000500)=""/218, 0xda}, {&(0x7f0000000600)=""/175, 0xaf}, {&(0x7f00000006c0)=""/75, 0x4b}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f0000000740)=""/218, 0xda}], 0x6}}, {{&(0x7f0000000900)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000000a40)}}], 0x2, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x1) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x800084, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@debug={'debug', 0x3d, 0x7}, 0x2c}]}}) sendmsg$nl_route(r0, &(0x7f0000001400)={&(0x7f00000001c0)={0x10}, 0xc, &(0x7f00000013c0)={&(0x7f0000000200)=@ipv6_getanyicast={0x14, 0x12, 0x105, 0x0, 0x0, {0xa}}, 0x14}, 0x1}, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@nl=@proc, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000b00)=""/84, 0x54}}], 0x1, 0x0, &(0x7f0000000a40)={0x0, 0x989680}) 00:53:02 executing program 4: socketpair(0x5, 0x806, 0x4, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = eventfd(0xde2) splice(r1, &(0x7f0000000080), r2, &(0x7f0000000200), 0x4, 0x6d10008c7bba0847) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="020f7790b4bb00000000000000000000030006000000000002000000e0000001000000000000000005000500000000000a0000000000000000000000000000000000ffff000000000000000000000000"], 0x50}, 0x1}, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)=0x0) ioprio_get$pid(0x3, r4) 00:53:02 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)="4775b880cb0830f6") read(r0, &(0x7f00000000c0)=""/240, 0xf0) ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000640)=ANY=[@ANYBLOB="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"]) flock(r0, 0x8) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) preadv(r0, &(0x7f0000000700), 0x1, 0x0) ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000000)) fadvise64(r0, 0x0, 0x0, 0x3) readv(r0, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/216, 0xfffffffffffffff3}], 0x1) 00:53:02 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xf, &(0x7f0000000100)=@req3, 0x3) kexec_load(0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000180)="7c099eb6660b2a475f71544a2a9134fb8fa552782e1c9d84b3f7423c8e79482a7cbc30b28df25613c36941af48ed10c5940ff8bb2f5ba379d85ad30e204489023dab", 0x42, 0xfff, 0xffffffffffff8ccb}, {&(0x7f0000000200)="e8", 0x1, 0x3}], 0x2) truncate(&(0x7f0000000380)='./file0/control\x00', 0x80000000) clock_nanosleep(0x2, 0x2, &(0x7f0000000000), 0x0) getegid() r1 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/pktcdvd/control\x00', 0xa000, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) ioctl$TIOCMBIS(r1, 0x5416, &(0x7f0000000140)=0x3) r2 = open(&(0x7f0000000040)='./file0\x00', 0x800, 0x120) getsockopt$packet_int(r0, 0x107, 0x1f, &(0x7f0000000280), &(0x7f00000002c0)=0x4) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000080)={@empty, @empty, @rand_addr=0x9}, 0xc) 00:53:02 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) read(r0, &(0x7f0000000280)=""/85, 0x55) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x100, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x7fffffff, 0x9, 0x2}]}, 0x8) write$P9_RREADDIR(r1, &(0x7f0000000080)={0xb, 0x29}, 0xb) 00:53:02 executing program 0: r0 = socket$inet6(0xa, 0x2000000802, 0x3) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@mcast1={0xff, 0x1, [], 0x1}, 0x800, 0x0, 0x2, 0x1}, 0x20) 00:53:02 executing program 6: r0 = inotify_init() r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x1ffffffd) dup3(r0, r1, 0x0) accept4$inet(r1, &(0x7f0000000040), &(0x7f00000000c0)=0x10, 0x80000) inotify_add_watch(r1, &(0x7f0000000080)='./file0\x00', 0xa0000028) 00:53:02 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'irlan0\x00', 0x1}) mkdir(&(0x7f0000000040)='./file0\x00', 0x1a) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000002c0)) 00:53:02 executing program 6: openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, &(0x7f00000002c0)=0x80) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="ff00040081400300ff0200000001fe8000000000000000000000000000aaff0100000000000000000000000000010000000000000000000000000000000100000000000000000000"], 0xa) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, &(0x7f0000000000)=0x3, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000402000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) fdatasync(0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, &(0x7f00007a8fff), 0x0, 0x20000000, &(0x7f00000001c0)={0xa, 0x4e20, 0x1, @loopback={0x0, 0x1}}, 0x1c) 00:53:02 executing program 4: r0 = gettid() ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000280)={0x0, 0x5}) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) fsync(0xffffffffffffffff) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) mq_notify(r1, &(0x7f0000000240)) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000080)=""/148) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000380)) unshare(0x40040000) fcntl$setown(0xffffffffffffffff, 0x8, r0) r2 = syz_open_procfs(r0, &(0x7f0000000040)='net/route\x00') sendfile(r2, r2, &(0x7f0000000340)=0x2a, 0x1) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000000)=0x1) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)={@multicast1, @multicast2}, &(0x7f0000000180)=0xc) syz_emit_ethernet(0xb9, &(0x7f0000000480)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @empty, [{[{0x9100, 0x9, 0x8001, 0xfffffffffffffac8}], {0x8100, 0x1, 0x7, 0x1}}], {@x25={0x805, {0x1, 0x3, 0x0, "12ea518283ae5facc4e28c6d7d64006ecfe01927f45fd7a5f711284763bd93cb5e6edd6c590b39675ad447cbde8acb2dbe7d25ee58a26768010958e6d204732aaf376d08d45503dde0f5b448069c776d55bbcb88ee705b93dcdac3d659b535871708534fdf9d22c1e38927f66d701b9ea062f6e5e1b76bf151d18032a653c0730727888a5637c22ffa09df973cb14719b6ed4eca6a547bff3ff59898f05c2a9c"}}}}, &(0x7f00000001c0)={0x0, 0x3, [0xb5c, 0x9bc, 0xddc, 0x249]}) 00:53:02 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000040)={0xffffffffffffffe1, 0xfffffffffffffeb4, "4cccbb95782d7a21a290ea677a9087850ce027af688a03dde0ea830afd9cb14a7d5e8ecf3db687b565a1b32ee567a20face2cd"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x2) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) 00:53:02 executing program 0: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f000028a000/0x3000)=nil, 0x3000}, 0x1}) r1 = gettid() r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x404240, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000000c0)={{{@in, @in6=@ipv4={[], [], @multicast1}}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000001c0)=0xe8) process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x239}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x7ffff000}], 0x1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000001, 0x32, 0xffffffffffffffff, 0x0) close(r2) 00:53:02 executing program 3: seccomp(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x5, 0x0, 0x2}, {0x6, 0x3, 0x0, 0xfffffffffffffffe}]}) getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) r0 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000540)='/dev/pktcdvd/control\x00', 0x10000, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000580)="efac88fe407dc8e1366ad08e0efe230bb0311496d962a17f1717073a8d3d4f1a336b6fda62ad54f82216bcdb9a9f075ac9d8ccca012356c6162a249e08036e0b817a319563a152f4f46b99f3301bb3d566f3d7760ca657a50d793ed59d115e1b743af818b3e5af9e905926781b48d6f29ad5938ec5ede1bcb39b1f2f18d26a061c4d3c563b3d5ada73d9cd34a0fef0e1944c5ac1581fc2b241fc8aadd119d845af8556151c49a885baf46e83fe6bb3ba531631eb6d9a2a860879395b7a82af9d9d8909a2552874f064ee07e2eaca25224b88c8fbc5b5de8a1a54e348b5868851852a43ac0c6d58aaf499c2de64076ae0793dee13f5c89a3b4bd5dee8eec1f7de") r1 = signalfd(0xffffffffffffffff, &(0x7f0000000180)={0x3ff}, 0x8) write$binfmt_elf32(r1, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x9, 0x6, 0x100000000, 0x39, 0x3, 0x3, 0x40, 0x1d6, 0x38, 0x1f2, 0x84, 0xfffffffffffffffb, 0x20, 0x2, 0x9dd, 0x3662, 0x4bb2}, [{0x6474e551, 0x9, 0xddb3, 0x8001, 0x2, 0x0, 0x4, 0xcd2}], "508ba0f0576338873c81f32db9859d6d8244a6eec5f187fa8e48feb023513908d693327f71c14ad949d6ed46ab5711d47e5578827e08d081f7e2bdf50cfc80b991a16bf805a4b3fad1289b923528aeeb6c712c0d877311150fbcba0d71500d3962c8d9c416a4e850378fc3773c5b1a366fcddb274ead6851963cb621dab5cc3ade9aa8e37e29cc45e39e6c905ccc807af6e8b661051a936b56f0a8930d08d80227a00e3b86d67701fb5748d8a32746b6c9912e256943b5c11adfadf90930631f6e775f53389a89d74f6afac31f1aaa1352b08b50d573f690e21791670ce0a7de442e200459985b78cb09f68cd7e6", [[], []]}, 0x346) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) 00:53:02 executing program 6: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/keycreate\x00') ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r0, 0x5386, &(0x7f0000000000)) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="7379b96d"], 0x4) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, &(0x7f0000000440)="bd", 0x1, 0xfffffffffffffffe) 00:53:02 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000e5a000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000067cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00003cb000)={0x34, 0x0, &(0x7f00001e9000)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000000000099225c847c648dbc455806cb000000000000ffffffffffffffff"], 0x0, 0x0, &(0x7f00002f6000)}) 00:53:02 executing program 6: kexec_load(0x400000000000aea7, 0x1, &(0x7f0000000180)=[{&(0x7f0000000080)="03a52ed4d505e712f5e7dd5af64ae4ca9029ca3132d093bcc3ba7ba388f3a60aeced6e19936c9ff1516b2ee27c3cdbe1d4993c17e53add4d191a9bf5927b48c121af8bd4061ff5519125c1ad6f29b9e7c03c3ec18e2162e016afac4bc4c32629fbe9c1fac5b7e7cc5f2fe89db460088eb2fcb46994e7d0027b42580226084030d4537c3c033ce20dadfc77047997c6d260bd98dae602250a4464616bda88f4ec9718bd6d1b8655aae6d8ea425f58391da98da58715d91ccbea78d6344721b4a6d34555679cfadd958ba7", 0x68, 0x10001}], 0x280000) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'bcsh0\x00', 0x2000}) [ 65.578387] binder: 6506:6509 transaction failed 29201/-22, size 51974--1 line 3141 [ 65.630137] binder: BINDER_SET_CONTEXT_MGR already set [ 65.643108] IPVS: Creating netns size=2536 id=9 [ 65.668935] binder: 6506:6528 ioctl 40046207 0 returned -16 [ 65.674847] binder_alloc: 6506: binder_alloc_buf, no vma [ 65.674866] binder: 6506:6532 transaction failed 29189/-3, size 51974--1 line 3141 [ 65.691601] binder: undelivered TRANSACTION_ERROR: 29201 [ 65.697167] binder: undelivered TRANSACTION_ERROR: 29189 [ 65.703330] IPVS: Creating netns size=2536 id=10 00:53:03 executing program 2: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000080)=0x0) r2 = syz_open_procfs(r1, &(0x7f00000000c0)='maps\x00') unshare(0x2000400) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000001140)=""/127) ioctl$BLKALIGNOFF(r2, 0x127a, &(0x7f0000000000)) fstatfs(r2, &(0x7f0000000140)=""/4096) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x2) 00:53:03 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[], 0xf6) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000580)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x76, &(0x7f0000000300)=""/118}, &(0x7f00000003c0)="920c4c1f9e9d", &(0x7f0000000480)=""/254, 0x0, 0x0, 0x0, &(0x7f0000000200)}) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x7, 0x4) 00:53:03 executing program 6: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/ip_vs_stats\x00') ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f0000000100)) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) creat(&(0x7f0000000940)='./file0\x00', 0x0) syz_fuse_mount(&(0x7f0000000a40)='./file0\x00', 0x0, 0xee00, 0xee01, 0x0, 0x0) 00:53:03 executing program 5: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$nl_xfrm(r0, &(0x7f0000000680)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000640)={&(0x7f0000000140)=@delpolicy={0x50, 0x14, 0x0, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in=@multicast1=0xe0000001}}}, 0x50}, 0x1}, 0x0) fsetxattr(r0, &(0x7f0000000040)=@random={'trusted.', '%\x00'}, &(0x7f0000000080)='posix_acl_access:\x00', 0x12, 0x2) [ 66.504721] ================================================================== [ 66.512215] BUG: KASAN: slab-out-of-bounds in p9pdu_readf+0x535/0x1d50 [ 66.518885] Read of size 23147 at addr ffff8801c8db002d by task syz-executor1/6540 [ 66.526572] [ 66.528221] CPU: 0 PID: 6540 Comm: syz-executor1 Not tainted 4.9.111-g03c70fe #10 [ 66.535832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 66.545172] ffff8801b722f570 ffffffff81eb2729 ffffea0007236c00 ffff8801c8db002d [ 66.553172] 0000000000000000 ffff8801c8db2025 0000000036f6bff3 ffff8801b722f5a8 [ 66.561176] ffffffff81567b59 ffff8801c8db002d 0000000000005a6b 0000000000000000 [ 66.569283] Call Trace: [ 66.571858] [] dump_stack+0xc1/0x128 [ 66.577224] [] print_address_description+0x6c/0x234 [ 66.583881] [] kasan_report.cold.6+0x242/0x2fe [ 66.590115] [] ? p9pdu_readf+0x535/0x1d50 [ 66.595912] [] check_memory_region+0x14f/0x1b0 [ 66.602143] [] memcpy+0x23/0x50 [ 66.607060] [] p9pdu_readf+0x535/0x1d50 [ 66.612698] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 66.619533] [] ? p9_client_rpc+0x643/0x1140 [ 66.625484] [] ? trace_event_raw_event_9p_client_res+0x270/0x270 [ 66.633262] [] ? add_wait_queue+0x76/0xa0 [ 66.639038] [] ? p9pdu_writef+0xe0/0xe0 [ 66.644636] [] ? p9_get_mapped_pages.isra.5.part.6+0x20b/0x6f0 [ 66.652235] [] ? pipe_poll+0x25c/0x2d0 [ 66.657760] [] ? p9_fd_poll+0x246/0x310 [ 66.663362] [] ? lockdep_init_map+0x105/0x4f0 [ 66.669482] [] ? prepare_to_wait_event+0x450/0x450 [ 66.676043] [] ? p9_conn_create+0x3c0/0x4c0 [ 66.681992] [] ? parse_opts.part.1+0x320/0x320 [ 66.688221] [] ? __raw_spin_lock_init+0x2d/0x100 [ 66.694605] [] p9_client_create+0xa3f/0x10a0 [ 66.700643] [] ? p9_client_zc_rpc.constprop.11+0x1020/0x1020 [ 66.708073] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 66.714887] [] ? bdi_register+0xb4/0x570 [ 66.720587] [] ? bdi_init+0x7ae/0xab0 [ 66.726014] [] v9fs_session_init+0x333/0x13a0 [ 66.732139] [] ? _raw_spin_unlock_irqrestore+0x45/0x70 [ 66.739056] [] ? debug_check_no_obj_freed+0x2ec/0x930 [ 66.745896] [] ? v9fs_inode_init_once+0x30/0x30 [ 66.752205] [] ? debug_object_activate+0x4e0/0x4e0 [ 66.758777] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 66.765611] [] ? free_hot_cold_page+0x493/0x840 [ 66.771937] [] ? check_preemption_disabled+0x3b/0x170 [ 66.778766] [] ? kasan_unpoison_shadow+0x35/0x50 [ 66.785156] [] ? kasan_kmalloc+0xc7/0xe0 [ 66.790864] [] ? kmem_cache_alloc_trace+0xfd/0x2b0 [ 66.797419] [] v9fs_mount+0x7d/0x810 [ 66.802770] [] mount_fs+0x28c/0x370 [ 66.808026] [] vfs_kern_mount.part.29+0xd1/0x3d0 [ 66.814424] [] ? ns_capable_common+0x12a/0x150 [ 66.820642] [] do_mount+0x3c9/0x2740 [ 66.825992] [] ? copy_mount_options+0x5f/0x320 [ 66.832205] [] ? copy_mount_string+0x40/0x40 [ 66.838257] [] ? kasan_unpoison_shadow+0x35/0x50 [ 66.844651] [] ? kasan_kmalloc+0xc7/0xe0 [ 66.850349] [] ? kmem_cache_alloc_trace+0xfd/0x2b0 [ 66.856912] [] ? copy_mount_options+0x5f/0x320 [ 66.863128] [] ? copy_mount_options+0x1e5/0x320 [ 66.869518] [] compat_SyS_mount+0x4fc/0xff0 [ 66.875473] [] ? do_fast_syscall_32+0xcf/0x870 [ 66.881686] [] ? compat_SyS_io_submit+0xf0/0xf0 [ 66.887989] [] do_fast_syscall_32+0x2f7/0x870 [ 66.894125] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 66.900774] [] entry_SYSENTER_compat+0x90/0xa2 [ 66.906977] [ 66.908596] The buggy address belongs to the page: [ 66.913500] page:ffffea0007236c00 count:1 mapcount:0 mapping: (null) index:0x0 compound_mapcount: 0 [ 66.923866] flags: 0x8000000000004000(head) [ 66.928167] page dumped because: kasan: bad access detected [ 66.933846] [ 66.935449] Memory state around the buggy address: [ 66.940355] ffff8801c8db1f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 66.947689] ffff8801c8db1f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 66.955021] >ffff8801c8db2000: 00 00 00 00 fe fe fe fe fe fe fe fe fe fe fe fe [ 66.962354] ^ [ 66.966743] ffff8801c8db2080: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 66.974078] ffff8801c8db2100: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 66.981411] ================================================================== [ 66.988745] Disabling lock debugging due to kernel taint [ 66.996609] Kernel panic - not syncing: panic_on_warn set ... [ 66.996609] [ 67.003976] CPU: 0 PID: 6540 Comm: syz-executor1 Tainted: G B 4.9.111-g03c70fe #10 [ 67.012787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 67.022120] ffff8801b722f4d0 ffffffff81eb2729 ffffffff843c71a7 00000000ffffffff [ 67.030110] 0000000000000000 0000000000000000 0000000036f6bff3 ffff8801b722f590 [ 67.038115] ffffffff814219f5 0000000041b58ab3 ffffffff843ba8c0 ffffffff81421836 [ 67.046112] Call Trace: [ 67.048678] [] dump_stack+0xc1/0x128 [ 67.054022] [] panic+0x1bf/0x3bc [ 67.059016] [] ? add_taint.cold.6+0x16/0x16 [ 67.064966] [] ? ___preempt_schedule+0x16/0x18 [ 67.071178] [] kasan_end_report+0x47/0x4f [ 67.076950] [] kasan_report.cold.6+0x76/0x2fe [ 67.083076] [] ? p9pdu_readf+0x535/0x1d50 [ 67.088855] [] check_memory_region+0x14f/0x1b0 [ 67.095086] [] memcpy+0x23/0x50 [ 67.100007] [] p9pdu_readf+0x535/0x1d50 [ 67.105609] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 67.112426] [] ? p9_client_rpc+0x643/0x1140 [ 67.119329] [] ? trace_event_raw_event_9p_client_res+0x270/0x270 [ 67.127107] [] ? add_wait_queue+0x76/0xa0 [ 67.132885] [] ? p9pdu_writef+0xe0/0xe0 [ 67.138485] [] ? p9_get_mapped_pages.isra.5.part.6+0x20b/0x6f0 [ 67.146087] [] ? pipe_poll+0x25c/0x2d0 [ 67.151632] [] ? p9_fd_poll+0x246/0x310 [ 67.157239] [] ? lockdep_init_map+0x105/0x4f0 [ 67.163454] [] ? prepare_to_wait_event+0x450/0x450 [ 67.170011] [] ? p9_conn_create+0x3c0/0x4c0 [ 67.175967] [] ? parse_opts.part.1+0x320/0x320 [ 67.182183] [] ? __raw_spin_lock_init+0x2d/0x100 [ 67.188573] [] p9_client_create+0xa3f/0x10a0 [ 67.194614] [] ? p9_client_zc_rpc.constprop.11+0x1020/0x1020 [ 67.202056] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 67.208904] [] ? bdi_register+0xb4/0x570 [ 67.215118] [] ? bdi_init+0x7ae/0xab0 [ 67.220558] [] v9fs_session_init+0x333/0x13a0 [ 67.226697] [] ? _raw_spin_unlock_irqrestore+0x45/0x70 [ 67.233694] [] ? debug_check_no_obj_freed+0x2ec/0x930 [ 67.240812] [] ? v9fs_inode_init_once+0x30/0x30 [ 67.247131] [] ? debug_object_activate+0x4e0/0x4e0 [ 67.253704] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 67.260557] [] ? free_hot_cold_page+0x493/0x840 [ 67.266885] [] ? check_preemption_disabled+0x3b/0x170 [ 67.273715] [] ? kasan_unpoison_shadow+0x35/0x50 [ 67.280099] [] ? kasan_kmalloc+0xc7/0xe0 [ 67.285786] [] ? kmem_cache_alloc_trace+0xfd/0x2b0 [ 67.292362] [] v9fs_mount+0x7d/0x810 [ 67.297723] [] mount_fs+0x28c/0x370 [ 67.302979] [] vfs_kern_mount.part.29+0xd1/0x3d0 [ 67.309368] [] ? ns_capable_common+0x12a/0x150 [ 67.315592] [] do_mount+0x3c9/0x2740 [ 67.320942] [] ? copy_mount_options+0x5f/0x320 [ 67.327155] [] ? copy_mount_string+0x40/0x40 [ 67.333194] [] ? kasan_unpoison_shadow+0x35/0x50 [ 67.339582] [] ? kasan_kmalloc+0xc7/0xe0 [ 67.345272] [] ? kmem_cache_alloc_trace+0xfd/0x2b0 [ 67.351836] [] ? copy_mount_options+0x5f/0x320 [ 67.358046] [] ? copy_mount_options+0x1e5/0x320 [ 67.364360] [] compat_SyS_mount+0x4fc/0xff0 [ 67.370311] [] ? do_fast_syscall_32+0xcf/0x870 [ 67.376704] [] ? compat_SyS_io_submit+0xf0/0xf0 [ 67.383005] [] do_fast_syscall_32+0x2f7/0x870 [ 67.389136] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 67.395803] [] entry_SYSENTER_compat+0x90/0xa2 [ 67.402752] Dumping ftrace buffer: [ 67.406288] (ftrace buffer empty) [ 67.409978] Kernel Offset: disabled [ 67.413596] Rebooting in 86400 seconds..